threejs-voxel-block-system
Warn
Audited by Socket on Oct 26, 2026
1 alert found:
AnomalyAnomalyscripts/voxel-world.js
LOWAnomalyLOW
scripts/voxel-world.js
This Three.js module is intended to generate and render voxel terrain and serialize world state. As written, a malformed method declaration prevents parsing; if corrected, chunk creation recursively re-enters itself during terrain generation and can exhaust the call stack. Unvalidated deserialization can also consume excessive resources with hostile input. No evidence of malware, credential theft, or network exfiltration; overall risk is moderate due to denial-of-service defects.
Confidence: 99%Severity: 55%
Audit Metadata