threejs-voxel-block-system

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/voxel-world.js

This Three.js module is intended to generate and render voxel terrain and serialize world state. As written, a malformed method declaration prevents parsing; if corrected, chunk creation recursively re-enters itself during terrain generation and can exhaust the call stack. Unvalidated deserialization can also consume excessive resources with hostile input. No evidence of malware, credential theft, or network exfiltration; overall risk is moderate due to denial-of-service defects.

Confidence: 99%Severity: 55%
Audit Metadata
Analyzed At
Oct 26, 2026, 09:26 AM
Package URL
pkg:socket/skills-sh/majinmagros%2Fmagros.ai-skills%2Fthreejs-voxel-block-system%2F@8df20164d68060e62e83dedf5e39b731fd7a0376a85be253525c8d36aceba4a5