Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.
-
file mixes tab and space indentation (46 tab-indented and 1 space-indented lines) (raw pass, confidence 0.40)
export const importPathRule = ({
meta: {
type: 'problem',
docs: {
-
U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
jsdoc('@example', '```\ntype A = string;\n```', '@category Test');
-
U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
```
*/
-
U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
'type Test = string;',
'/**\nSome description.\nNote: Some note.\n*⟨U+200B⟩/'
);
-
U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
*/
-
U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
'type Test = string;',
'/**\nSome description.\nNote: Some note.\n*⟨U+200B⟩/'
);
-
U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
-
U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
```
exportTypeAndOption('// Some comment', '/**\nSome JSDoc\n*⟨U+200B⟩/');
// Returns:
// // Some comment
-
U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
-
U+200B ZERO WIDTH SPACE in source (in string/comment) (raw pass, confidence 0.45)
-
base64-like blob (139 bytes, compression ratio 0.95) (raw pass, confidence 0.60)
[Playground](https://www.typescriptlang.org/play?#code/JYWwDg9gTgLgBDAnmApnA3gBQIYGMDW2A5igFIDOEAdnNuXAEJ0o4HFmVUC+cAZlBBBwA5ElQBaXinIxhAbgCwAKFCRYCZGnQAZYFRgooPfoJHSANntmKlysWlaESFanAC8jZo-YuaAMgwLKwBhal5gIgB+AC44XX1DADpQqnCiLhsgA)
```ts
likely benign
LLM, confidence 0.93
A TypeScript Playground share link in the readme whose URL fragment is a compressed code payload.
Reasoning
The finding sits inside a markdown link to a TypeScript Playground URL. The 'base64-like' payload is the lz-string-compressed code parameter in the share link, a normal documentation pattern in a readme. It is not executed or decoded by any code.
-
line length 883 characters (raw pass, confidence 0.50)
[Playground](https://www.typescriptlang.org/play/?#code/JYOwLgpgTgZghgYwgAgKoGdrIN4FgBQyyAkMACYBcyIArgLYBG0A3AUcSHHRFemFKADmrQiTiCe1ekygiiAXwJtkCADZx06NJigBBAA7AAytABuwJDmXENATxAJkMCGAQALDNAAUNHQElKKUZoAEoqAAUoAHs6YEwAHk8oAD4rUWJiAHpM5AAxF3dkMDcUXywyODA4J2i6IpLkCqqGDQgAOmssnIAVBsQwGjhVZGA6fVUIbnBK4CiQZFjBNzBkVSiogGtV
-
base64-like blob (522 bytes, compression ratio 0.78) (raw pass, confidence 0.60)
Playground](https://www.typescriptlang.org/play/?#code/JYOwLgpgTgZghgYwgAgKoGdrIN4FgBQyyAkMACYBcyIArgLYBG0A3AUcSHHRFemFKADmrQiTiCe1ekygiiAXwJtkCADZx06NJigBBAA7AAytABuwJDmXENATxAJkMCGAQALDNAAUNHQElKKUZoAEoqAAUoAHs6YEwAHk8oAD4rUWJiAHpM5AAxF3dkMDcUXywyODA4J2i6IpLkCqqGDQgAOmssnIAVBsQwGjhVZGA6fVUIbnBK4CiQZFjBNzBkVSiogGtV4A2
likely benign
LLM, confidence 0.93
A TypeScript Playground link in the readme carrying an lz-compressed code fragment.
Reasoning
This is a markdown link to typescriptlang.org/play with a compressed code fragment in the URL. Raw-pass base64 matches in documentation URLs are a known false-positive pattern, and nothing in the readme decodes or runs the blob.
-
base64-like blob (129 bytes, compression ratio 0.98) (raw pass, confidence 0.60)
sEAA2l93u4kl8ALrJZIiZR2BxOGgOMCzeZuOAgMgTJKcypwLx-C1QcxIKhJc0mWNWhngwK0YJQEJpdj8Wy5mEIU4rQFURXuZWq+5PF4raPJuPte0eHQ+fxkXHpWG6GCQKBOApuITIQGNCMM2xRGgqIPIeWwKJQOqmOACadafr+rToGiFDSj-RNEfFUo6EbgaDwJB0vGz9wnhqImpRb2Es8QBlLhZwDYjuBkGQrz+kMyC6OEfjnBAACONCXGAm5aCAEDKsqHTpPIs4fMgXjQNE2aFhkxx4d+gbBqoQjWJKChKKIxbwqWZqGI2VpqtQECP
likely benign
LLM, confidence 0.93
Continuation of the compressed code parameter inside a Playground URL in the readme.
Reasoning
The match is a continuation of the same playground URL fragment in the readme. It is a documentation link payload, not code that is executed.
-
base64-like blob (176 bytes, compression ratio 0.91) (raw pass, confidence 0.60)
OApuITIQGNCMM2xRGgqIPIeWwKJQOqmOACadafr+rToGiFDSj-RNEfFUo6EbgaDwJB0vGz9wnhqImpRb2Es8QBlLhZwDYjuBkGQrz+kMyC6OEfjnBAACONCXGAm5aCAEDKsqHTpPIs4fMgXjQNE2aFhkxx4d+gbBqoQjWJKChKKIxbwqWZqGI2VpqtQECPNo0BJpaSA4tCZEhhAYYRu23HMbxn7IDSUJAA)
likely benign
LLM, confidence 0.93
Further segment of the compressed Playground link payload in the readme.
Reasoning
This is another segment of the same Playground share URL in the readme. The raw-pass blob heuristic fires on URL-encoded compressed content, and there is no execution context.
-
line length 580 characters (raw pass, confidence 0.50)
[Playground](https://www.typescriptlang.org/play/#code/JYOwLgpgTgZghgYwgAgHIHsAmEDC6QzADmyA3gLABQyycADnanALYQBcyAzmFKEQNxUaddFDAcQAV2YAjaIMoBfKlQQAbOJ05osEAIIMAQpOBrsUMkOR1eANziRkCfISKSoD4Pg4ZseAsTIALyW1DS0DEysHADkvvoMMQA0VsKi4sgAzAAMuVaKClY2wPaOknSYDrguADwA0sgQAB6QIJjaANYQAJ7oMDp+LsQAfAAUXd0cdUnI9mo+uv6uANp1ALoAlKHhy
-
base64-like blob (528 bytes, compression ratio 0.79) (raw pass, confidence 0.60)
[Playground](https://www.typescriptlang.org/play/#code/JYOwLgpgTgZghgYwgAgHIHsAmEDC6QzADmyA3gLABQyycADnanALYQBcyAzmFKEQNxUaddFDAcQAV2YAjaIMoBfKlQQAbOJ05osEAIIMAQpOBrsUMkOR1eANziRkCfISKSoD4Pg4ZseAsTIALyW1DS0DEysHADkvvoMMQA0VsKi4sgAzAAMuVaKClY2wPaOknSYDrguADwA0sgQAB6QIJjaANYQAJ7oMDp+LsQAfAAUXd0cdUnI9mo+uv6uANp1ALoAlKHhyG
likely benign
LLM, confidence 0.93
A TypeScript Playground link in the readme with a compressed code payload in the fragment.
Reasoning
A markdown link to the TypeScript Playground with an lz-compressed code fragment. This is standard documentation linking and matches the raw-pass false-positive profile.
-
base64-like blob (283 bytes, compression ratio 0.84) (raw pass, confidence 0.60)
Q4SwOwFwUwJwGYEMDGNgGED21VQGJZwC2wA3gFCjXAzFJgA2A-AFzADOUckA5gNxUaIYjA4ckvGG07c+g6gF8KQkAgCuEFFDA5O6gEbEwUbLm2ESwABQIixACJIoSdgCUYAR3Vg4MACYAPGYuFvYAfACU5Ko0APRxwADKMBD+wFAAFuh2Vv7OSBlYGdmc8ABu8LHKsRyGxqY4oQT21pTCIHQMjOwA5DAAHgACxAAOjDAAdChYxL0ANLHUouKSMH0AEmAAhJhY6ozpAJ77GTCMjMCiV0ToSAb7UJPPC9WRgrEJwAAqR6MwSRQPFGUFocD
likely benign
LLM, confidence 0.93
Compressed code parameter from a TypeScript Playground link in the readme.
Reasoning
This is a compressed code fragment in a Playground URL within the readme. It is documentation content, and the raw pass flags the URL-safe base64-like string.
-
line length 610 characters (raw pass, confidence 0.50)
[Playground](https://typescript-play.js.org/?target=6#code/AQ4UwOwVwW2AZA9gc3mAbmANsA3gKFCOAHkAzMgGkOJABEwAjKZa2kAUQCcvEu32AMQCGAF2FYBIAL4BufDRABLCKLBcywgMZgEKZOoDCiCGSXI8i4hGEwwALmABnUVxXJ57YFgzZHSVF8sT1BpBSItLGEnJz1kAy5LLy0TM2RHACUwYQATEywATwAeAITjU3MAPnkrCJMXLigtUT4AClxgGztKbyDgaX99I1TzAEokr1BRAAslJwA6FIqLAF48TtswH
-
base64-like blob (554 bytes, compression ratio 0.79) (raw pass, confidence 0.60)
yground](https://typescript-play.js.org/?target=6#code/AQ4UwOwVwW2AZA9gc3mAbmANsA3gKFCOAHkAzMgGkOJABEwAjKZa2kAUQCcvEu32AMQCGAF2FYBIAL4BufDRABLCKLBcywgMZgEKZOoDCiCGSXI8i4hGEwwALmABnUVxXJ57YFgzZHSVF8sT1BpBSItLGEnJz1kAy5LLy0TM2RHACUwYQATEywATwAeAITjU3MAPnkrCJMXLigtUT4AClxgGztKbyDgaX99I1TzAEokr1BRAAslJwA6FIqLAF48TtswHp9MHD
likely benign
LLM, confidence 0.93
A typescript-play share link in the readme with an encoded code fragment.
Reasoning
The URL points to typescript-play.js.org with a target parameter and a compressed code fragment. This is a shareable playground link in documentation, not an obfuscated payload.
-
line length 704 characters (raw pass, confidence 0.50)
[Playground](https://typescript-play.js.org/?target=6#code/AQ4SwOwFwUwJwGYEMDGNgEE5TCgNugN4BQoZwOUBAXMAM5RyQDmA3KeSFABYCuAtgCMISMHloMmENh04oA9tBjQJjFuzIBfYrOAB6PcADCcGElh1gEGAHcKATwAO6ebyjB5CTNlwFwSxFR0BX5HeToYABNgBDh5fm8cfBg6AHIKG3ldA2BHOOcfFNpUygJ0pAhokr4hETFUgDpswywkggAFUwA3MFtgAF5gQgowKhhVKTYKGuFRcXo1aVZgbTIoJ3RW3
-
base64-like blob (648 bytes, compression ratio 0.78) (raw pass, confidence 0.60)
yground](https://typescript-play.js.org/?target=6#code/AQ4SwOwFwUwJwGYEMDGNgEE5TCgNugN4BQoZwOUBAXMAM5RyQDmA3KeSFABYCuAtgCMISMHloMmENh04oA9tBjQJjFuzIBfYrOAB6PcADCcGElh1gEGAHcKATwAO6ebyjB5CTNlwFwSxFR0BX5HeToYABNgBDh5fm8cfBg6AHIKG3ldA2BHOOcfFNpUygJ0pAhokr4hETFUgDpswywkggAFUwA3MFtgAF5gQgowKhhVKTYKGuFRcXo1aVZgbTIoJ3RW3xhOmB
likely benign
LLM, confidence 0.93
A typescript-play share link in the readme with a long compressed code fragment.
Reasoning
Same pattern as the other playground links: a compressed code fragment in a typescript-play URL in the readme. No decoding or execution is present in the file.
-
line length 901 characters (raw pass, confidence 0.50)
[Playground](https://typescript-play.js.org/?target=6#code/AQ4ejYAUHsGcCWAXBMB2dgwGbAKYC2ADgDYwCeeemCaWArgE7ADGMxAhmuQHQBQoYEnJE8wALKEARnkaxEKdMAC8wAOS0kstGuAAfdQBM8ANzxlRjXQbVaWACwC0JPB0NqA3HwGgIwAJJoWozYHCxixnAsjAhStADmwESMMJYo1Fi4HMCIaPEu+MRklHj8gpqyoeHAAKJFFFTAAN4+giDYCIxwSAByHAR4AFw5SDF5Xm2gJBzdfQPD3WPxE5PAlBxdAP
-
base64-like blob (318 bytes, compression ratio 0.83) (raw pass, confidence 0.60)
yground](https://typescript-play.js.org/?target=6#code/AQ4ejYAUHsGcCWAXBMB2dgwGbAKYC2ADgDYwCeeemCaWArgE7ADGMxAhmuQHQBQoYEnJE8wALKEARnkaxEKdMAC8wAOS0kstGuAAfdQBM8ANzxlRjXQbVaWACwC0JPB0NqA3HwGgIwAJJoWozYHCxixnAsjAhStADmwESMMJYo1Fi4HMCIaPEu+MRklHj8gpqyoeHAAKJFFFTAAN4+giDYCIxwSAByHAR4AFw5SDF5Xm2gJBzdfQPD3WPxE5PAlBxdAPLYNQA
likely benign
LLM, confidence 0.93
A typescript-play share link in the readme with an lz-compressed code payload.
Reasoning
A typescript-play URL with a compressed code fragment in the readme. It is a documentation link, and the base64-like match is a false positive of the raw pass.
-
base64-like blob (155 bytes, compression ratio 0.94) (raw pass, confidence 0.60)
LEhC9g4-0BmA4JBISXgiCkBQABpILrJ5MhUGhYcATGD6Bk4Hh-jNgABrPDkOBlXyQAAq9ngYmJpOAAHcEOCRjAXqwYODfoo6DhakUSph+Uh7GI4P0xER4Cj0OSQGwMP8tP1hgAlX7swwAHgRl2RvIANALSA08ABtAC6AD4VM1Wm0Kow0MMrYaHYJjGYLLJXZb3at1HYnC43Go-QHQDcvA6-JsmEJXARgCDgMYWAhjIYhDAU+YiMAAFIwex0ZmilMITCGF79TLAGRsAgJYAAZRwSEZGzEABFTOZUrJ5Yn+jwnWgeER6HB7AAKJrADpdXq
likely benign
LLM, confidence 0.92
Continuation of a compressed Playground code fragment in a readme link.
Reasoning
This is a continuation segment of the playground URL fragment in the readme. It is a documentation artifact, not a dropper or hidden payload.
-
base64-like blob (319 bytes, compression ratio 0.83) (raw pass, confidence 0.60)
4VM1Wm0Kow0MMrYaHYJjGYLLJXZb3at1HYnC43Go-QHQDcvA6-JsmEJXARgCDgMYWAhjIYhDAU+YiMAAFIwex0ZmilMITCGF79TLAGRsAgJYAAZRwSEZGzEABFTOZUrJ5Yn+jwnWgeER6HB7AAKJrADpdXqS4ZqYultTG6azVfqHswPBbtauLY7fayQ7HIbAAAMwBuAEoYw9IBq2Ixs9h2eFMOQYPQObALQKJgggABeYhghCIpikkKRpOQRIknAsZUiIeCttECBEP8NSMCkjDDAARMGziuIYxHwYOjDCMBmDNnAuTxA6irdCOBB1Lh5D
dismissed
LLM, confidence 0.92
A long compressed string inside a markdown document, most likely part of a TypeScript Playground link.
Reasoning
Raw-pass base64 heuristic on a markdown file. The blob uses URL-safe characters and matches the lz-string compressed code format used by TypeScript Playground share links, so it is documentation content rather than an encoded payload.
-
line length 638 characters (raw pass, confidence 0.50)
[Playground](https://typescript-play.js.org/?target=6#code/JYOwLgpgTgZghgYwgAgMrQG7QMIHsQzADmyA3gFDLIAOuUYAXMiAK4A2byAPsgM5hRQJHqwC2AI2gBucgF9y5MAE9qKAEoQAjiwj8AEnBAATNtGQBeZAAooWphu26wAGmS3e93bRC8IASgsAPmRDJRlyAHoI5ABRAA8ENhYjFFYOZGVVZBgoXFFkAAM0zh5+QRBhZhYJaAKAOkjogEkQZAQ4X2QAdwALCFbaemRgXmQtFjhOMFwq9K6ULuB0lk6U+HYw
-
base64-like blob (582 bytes, compression ratio 0.79) (raw pass, confidence 0.60)
yground](https://typescript-play.js.org/?target=6#code/JYOwLgpgTgZghgYwgAgMrQG7QMIHsQzADmyA3gFDLIAOuUYAXMiAK4A2byAPsgM5hRQJHqwC2AI2gBucgF9y5MAE9qKAEoQAjiwj8AEnBAATNtGQBeZAAooWphu26wAGmS3e93bRC8IASgsAPmRDJRlyAHoI5ABRAA8ENhYjFFYOZGVVZBgoXFFkAAM0zh5+QRBhZhYJaAKAOkjogEkQZAQ4X2QAdwALCFbaemRgXmQtFjhOMFwq9K6ULuB0lk6U+HYwZAxJn
dismissed
LLM, confidence 0.92
Compressed TypeScript Playground code in a markdown link URL.
Reasoning
The blob sits inside a typescript-play.js.org URL fragment (#code/...) in a markdown link. This is the Playground's compressed-code share format, a legitimate documentation pattern, and the raw pass has a high false-positive rate on such strings.
-
line length 714 characters (raw pass, confidence 0.50)
[Playground](https://typescript-play.js.org/?target=6#code/CYUwxgNghgTiAEAzArgOzAFwJYHtXzSwEdkQBJYACgEoAueVZAWwCMQYBuAKDDwGcM8MgBF4AXngBlAJ6scESgHIRi6ty5ZUGdoihgEABXZ888AN5d48ANoiAuvUat23K6ihMQ9ATE0BzV3goPy8GZjZOLgBfLi4Aejj4AEEICBwAdz54MAALKFQQ+BxEeAAHY1NgKAwoIKy0grr4DByEUpgccpgMaXgAaxBerCzi+B9-ZulygDouFHRsU1z8kKMYE1R
-
base64-like blob (241 bytes, compression ratio 0.87) (raw pass, confidence 0.60)
yground](https://typescript-play.js.org/?target=6#code/CYUwxgNghgTiAEAzArgOzAFwJYHtXzSwEdkQBJYACgEoAueVZAWwCMQYBuAKDDwGcM8MgBF4AXngBlAJ6scESgHIRi6ty5ZUGdoihgEABXZ888AN5d48ANoiAuvUat23K6ihMQ9ATE0BzV3goPy8GZjZOLgBfLi4Aejj4AEEICBwAdz54MAALKFQQ+BxEeAAHY1NgKAwoIKy0grr4DByEUpgccpgMaXgAaxBerCzi+B9-ZulygDouFHRsU1z8kKMYE1RhaqgA
dismissed
LLM, confidence 0.92
TypeScript Playground example link with compressed code in the fragment.
Reasoning
Same pattern: a markdown link to typescript-play.js.org with a #code/ fragment holding lz-string compressed source. No executable context is present, and the blob is an ordinary example link.
-
base64-like blob (416 bytes, compression ratio 0.82) (raw pass, confidence 0.60)
xEeAAHY1NgKAwoIKy0grr4DByEUpgccpgMaXgAaxBerCzi+B9-ZulygDouFHRsU1z8kKMYE1RhaqgAHkt4AHkWACt4EAAPbVRgLLWNgBp9gGlBs8uQa6yAUUuYPQwdgNpKM7nh7mMML4CgA+R5WABqUAgpDeVxuhxO1he0jsXGh8EoOBO9COx3BQPo2PBADckaR6IjkSA6PBqTgsMBzPsicdrEC7OJWXSQNwYvFEgAVTS9JLXODpeDpKBZFg4GCoWa8VACIJykAKiQWKy2YQOAioYikCg0OEMDyhRSy4DyxS24KhAAMjyi6gS8AAwjh5
dismissed
LLM, confidence 0.92
Second TypeScript Playground example link with compressed code.
Reasoning
A second Playground link on the same line range, with the same compressed-code fragment format. It is a documentation example, not obfuscation.
-
line length 556 characters (raw pass, confidence 0.50)
[Playground](https://typescript-play.js.org/?target=6#code/C4TwDgpgBACg9gJ2AOQK4FsBGEFQLxQDOwCAlgHYDmUAPlORtrnQwDasDcAUFwPQBU-WAEMkUOADMowqAGNWwwoSgATCBIqlgpOOSjAAFsOBRSy1IQgr9cKJlSlW1mZYQA3HFH68u8xcoBlHA8EACEHJ08Aby4oKDBUTFZSWXjEFEYcAEIALihkXTR2YSSIAB54JDQsHAA+blj4xOTUsHSACkMzPKD3HHDHNQQAGjSkPMqMmoQASh7g-oihqBi4uNIpd
-
4 rows of base64-like lines, lines 750-750 (first: base64-like blob (71 bytes, compression ratio 1.15)) (raw pass, confidence 0.60)
yground](https://typescript-play.js.org/?target=6#code/C4TwDgpgBACg9gJ2AOQK4FsBGEFQLxQDOwCAlgHYDmUAPlORtrnQwDasDcAUFwPQBU-WAEMkUOADMowqAGNWwwoSgATCBIqlgpOOSjAAFsOBRSy1IQgr9cKJlSlW1mZYQA3HFH68u8xcoBlHA8EACEHJ08Aby4oKDBUTFZSWXjEFEYcAEIALihkXTR2YSSIAB54JDQsHAA+blj4xOTUsHSACkMzPKD3HHDHNQQAGjSkPMqMmoQASh7g-oihqBi4uNIpdraxPA
dismissed
LLM, confidence 0.90
Playground share-link fragment containing compressed TypeScript code.
Reasoning
Four lines of base64-like content in a markdown Playground link fragment (#code/C4Tw...). The format matches lz-string share links, and the raw pass flags the length and character set alone.
-
line length 523 characters (raw pass, confidence 0.50)
[Playground](https://typescript-play.js.org/?target=6#code/GYVwdgxgLglg9mABAZwBYmMANgUwBQxgAOIUAXIgIZgCeA2gLoCUFAbnDACaIDeAUIkQB6IYgCypSlBxUATrMo1ECsJzgBbLEoipqAc0J7EMKMgDkiHLnU4wp46pwAPHMgB0fAL58+oSLARECEosLAA5ABUYG2QAHgAxJGdpVWREPDdMylk9ZApqemZEAF4APipacrw-CApEgBogkKwAYThwckQwEHUAIxxZJl4BYVEImiIZKF0oZRwiWVdbeygJmThg
-
base64-like blob (204 bytes, compression ratio 0.87) (raw pass, confidence 0.60)
yground](https://typescript-play.js.org/?target=6#code/GYVwdgxgLglg9mABAZwBYmMANgUwBQxgAOIUAXIgIZgCeA2gLoCUFAbnDACaIDeAUIkQB6IYgCypSlBxUATrMo1ECsJzgBbLEoipqAc0J7EMKMgDkiHLnU4wp46pwAPHMgB0fAL58+oSLARECEosLAA5ABUYG2QAHgAxJGdpVWREPDdMylk9ZApqemZEAF4APipacrw-CApEgBogkKwAYThwckQwEHUAIxxZJl4BYVEImiIZKF0oZRwiWVdbeygJmThgOYgcG
dismissed
LLM, confidence 0.92
Markdown link to a TypeScript Playground example with compressed code.
Reasoning
A typescript-play.js.org link with a #code/ compressed fragment in markdown. This is a standard way to embed runnable examples in docs.
-
base64-like blob (262 bytes, compression ratio 0.85) (raw pass, confidence 0.60)
A5ABUYG2QAHgAxJGdpVWREPDdMylk9ZApqemZEAF4APipacrw-CApEgBogkKwAYThwckQwEHUAIxxZJl4BYVEImiIZKF0oZRwiWVdbeygJmThgOYgcGFYcbhqApCJsyhtpWXcR1cnEePBoeDAABVPzgbTixFeFd8uEsClADcIxGiygIFkSEOT3SmTc2VydQeRx+ZxwF2QQ34gkEwDgsnSuFmMBKiAADEDjIhYk1Qm0OlSYABqZnYka4xA1DJZHJYkGc7yCbyeRA+CAIZCzNAYbA4CIAdxg2zJwVCkWirjwMswuEaACYmCCgA)
dismissed
LLM, confidence 0.92
Second segment of the same Playground link with compressed code.
Reasoning
A continuation of the same Playground URL on the same line. The content is compressed example code in a documentation link, not an encoded dropper or hidden payload.
-
line length 763 characters (raw pass, confidence 0.50)
[Playground](https://typescript-play.js.org/?target=6#code/MYGwhgzhAECCBOAXAlqApgWQPYBM0mgG8AoaaFRENALmgkXmQDsBzAblOmCycTV4D8teo1YdO3JiICuwRFngAKClWENmLAJRFOZRAAtkEAHQq00ALzlklNBzIBfYk+KhIMAJJTEYJsDQAwmDA+mgAPAAq0GgAHnxMODCKTGgA7tCKxllg8CwQtL4AngDaALraFgB80EWa1SRkAA6MAG5gfNAB4FABPDJyCrQR9tDNyG0dwMGhtBhgjWEiGgA00F70vv4
-
base64-like blob (344 bytes, compression ratio 0.83) (raw pass, confidence 0.60)
yground](https://typescript-play.js.org/?target=6#code/MYGwhgzhAECCBOAXAlqApgWQPYBM0mgG8AoaaFRENALmgkXmQDsBzAblOmCycTV4D8teo1YdO3JiICuwRFngAKClWENmLAJRFOZRAAtkEAHQq00ALzlklNBzIBfYk+KhIMAJJTEYJsDQAwmDA+mgAPAAq0GgAHnxMODCKTGgA7tCKxllg8CwQtL4AngDaALraFgB80EWa1SRkAA6MAG5gfNAB4FABPDJyCrQR9tDNyG0dwMGhtBhgjWEiGgA00F70vv4RhY3h
dismissed
LLM, confidence 0.92
Markdown TypeScript Playground example link with compressed code.
Reasoning
Another typescript-play.js.org #code/ link in markdown carrying lz-string compressed source. The context is documentation, and no decode or execution step is present.
-
base64-like blob (362 bytes, compression ratio 0.82) (raw pass, confidence 0.60)
EPaDWTkhiZd7r3e8LK3llwGCMXGQWGhEOsfH5zJlsrl8p0+gw-goAAo5MAAW3BaHgEEilU0tEhmzQ212BJ0ry4SOg+kg+gBBiMximIGA0nAfAQLGk2N4EAAEgzYcYcnkLsRdDTvNEYkYUKwSdCme9WdM0MYwYhFPSIPpJdTkAAzDKxBUaZX+aAAQgsVmkCTQxuYaBw2ng4Ok8CYcotSu8pMur09iG9vuObxZnx6SN+AyUWTF8MN0CcZE4Ywm5jZHK5aB5fP4iCFIqT4oRRTKRLo6lYVNeAHpG50wOzOe1zHr9NLQ+HoABybsD4HOKXXR
dismissed
LLM, confidence 0.92
Continuation of a TypeScript Playground example link with compressed code.
Reasoning
A continuation of the Playground link fragment on the same line. The blob's shape and location match legitimate share-link content in a README.
-
line length 938 characters (raw pass, confidence 0.50)
[Playground](https://typescript-play.js.org/?target=6#code/MYGwhgzhAECSAmICmBlJAnAbgS2E6A3gFDTTwD2AcuQC4AW2AdgOYAUAlAFzSbnbyEAvkWFFQkGJSQB3GMVI1sNZNwg10TZgG4S0YOUY0kh1es07d+xmvQBXYDXLpWi5UlMaWAGj0GjJ6BtNdkJdBQYIADpXZGgAXmgYpB1ScOwoq38aeN9DYxoU6GFRKzVoJjUwRjwAYXJbPPRuAFkwAAcAHgAxBodsAx9GWwBbACMMAD4cxhloVraOCyYjdAAzMDxo
-
base64-like blob (535 bytes, compression ratio 0.80) (raw pass, confidence 0.60)
yground](https://typescript-play.js.org/?target=6#code/MYGwhgzhAECSAmICmBlJAnAbgS2E6A3gFDTTwD2AcuQC4AW2AdgOYAUAlAFzSbnbyEAvkWFFQkGJSQB3GMVI1sNZNwg10TZgG4S0YOUY0kh1es07d+xmvQBXYDXLpWi5UlMaWAGj0GjJ6BtNdkJdBQYIADpXZGgAXmgYpB1ScOwoq38aeN9DYxoU6GFRKzVoJjUwRjwAYXJbPPRuAFkwAAcAHgAxBodsAx9GWwBbACMMAD4cxhloVraOCyYjdAAzMDxoOut1e
likely benign
LLM, confidence 0.92
Compressed TypeScript playground code embedded in a documentation link.
Reasoning
The raw base64-like blob sits inside a typescript-play URL fragment in a markdown link. It is lz-string style compressed playground source, a common documentation pattern. The raw pass has a high false-positive rate, and nothing here executes or hides code.
-
base64-like blob (142 bytes, compression ratio 0.96) (raw pass, confidence 0.60)
FddXlzKjyACp3Nq842HaDIbL6BrZBIVGhIpB1EMYSLsmjmtWW-YhAA+qegAAYLKQLQj3ZsEsdccmnGcLor2Dn8xGedHGpEIBzEzspfsfMHDNAANTQACMVaIljV5GQkRA5DYmIpVKQAgAJARO9le33BDXIyi0YuLW2nJFGLqkOvxFB0YPdBSaLZ0IwNzyPkO8-xkGgsLh8Al427a3hWAhXwwHA8EHT5PmgAB1bAQBAANJ24adKWpft72RaBUTgRBUCAj89HAM8xCTaBjggABRQx0DuHJv25P9dCkWRZVIAAiBjoFImpmjlFBgA0Npsjad
likely benign
LLM, confidence 0.92
Second compressed playground payload in the same readme link.
Reasoning
This is another encoded fragment of the same kind of typescript-play URL in the readme. It is a documentation link carrying compressed playground state, with no execution path.
-
base64-like blob (203 bytes, compression ratio 0.89) (raw pass, confidence 0.60)
O9le33BDXIyi0YuLW2nJFGLqkOvxFB0YPdBSaLZ0IwNzyPkO8-xkGgsLh8Al427a3hWAhXwwHA8EHT5PmgAB1bAQBAANJ24adKWpft72RaBUTgRBUCAj89HAM8xCTaBjggABRQx0DuHJv25P9dCkWRZVIAAiBjoFImpmjlFBgA0NpsjadByDacgIDAEAIAAQmYpjoGYgAZSBsmGPw6DtZiiFA8CoJguDmAQmoZ2QvtUKQLdoAYmBTwgdEiCAA)
likely benign
LLM, confidence 0.92
Third compressed segment of the playground link in the readme.
Reasoning
Same playground URL pattern as the neighbouring blobs on this line. It is compressed editor state inside a documentation link.
-
line length 938 characters (raw pass, confidence 0.50)
[Playground](https://typescript-play.js.org/?target=6#code/MYGwhgzhAECSAmICmBlJAnAbgS2E6A3gFDTTwD2AcuQC4AW2AdgOYAUAlAFzSbnbyEAvkWFFQkGJSQB3GMVI1sNZNwg10TZgG4S0YOUY0kh1es07d+xmvQBXYDXLpWi5UlMaWAGj0GjJ6BtNdkJdBQYIADpXZGgAXmgYpB1ScOwoq38aeN9DYxoU6GFRKzVoJjUwRjwAYXJbPPRuAFkwAAcAHgAxBodsAx9GWwBbACMMAD4cxhloVraOCyYjdAAzMDxo
-
base64-like blob (535 bytes, compression ratio 0.80) (raw pass, confidence 0.60)
yground](https://typescript-play.js.org/?target=6#code/MYGwhgzhAECSAmICmBlJAnAbgS2E6A3gFDTTwD2AcuQC4AW2AdgOYAUAlAFzSbnbyEAvkWFFQkGJSQB3GMVI1sNZNwg10TZgG4S0YOUY0kh1es07d+xmvQBXYDXLpWi5UlMaWAGj0GjJ6BtNdkJdBQYIADpXZGgAXmgYpB1ScOwoq38aeN9DYxoU6GFRKzVoJjUwRjwAYXJbPPRuAFkwAAcAHgAxBodsAx9GWwBbACMMAD4cxhloVraOCyYjdAAzMDxoOut1e
likely benign
LLM, confidence 0.92
Compressed TypeScript playground link in a second readme section.
Reasoning
This repeats the typescript-play compressed-code link pattern found at line 864. It is documentation content with no executable or dropper behaviour.
-
base64-like blob (142 bytes, compression ratio 0.96) (raw pass, confidence 0.60)
FddXlzKjyACp3Nq842HaDIbL6BrZBIVGhIpB1EMYSLsmjmtWW-YhAA+qegAAYLKQLQj3ZsEsdccmnGcLor2Dn8xGedHGpEIBzEzspfsfMHDNAANTQACMVaIljV5GQkRA5DYmIpVKQAgAJARO9le33BDXIyi0YuLW2nJFGLqkOvxFB0YPdBSaLZ0IwNzyPkO8-xkGgsLh8Al427a3hWAhXwwHA8EHT5PmgAB1bAQBAANJ24adKWpft72RaBUTgRBUCAj89HAM8xCTaBjggABRQx0DuHJv25P9dCkWRZVIAAiBjoFImpmjlFBgA0Npsjad
likely benign
LLM, confidence 0.92
Compressed playground payload repeated in the readme.
Reasoning
The blob is a compressed playground payload in a documentation URL, identical in pattern to the other readme findings. No decoding or execution occurs in the markdown.
-
base64-like blob (203 bytes, compression ratio 0.89) (raw pass, confidence 0.60)
O9le33BDXIyi0YuLW2nJFGLqkOvxFB0YPdBSaLZ0IwNzyPkO8-xkGgsLh8Al427a3hWAhXwwHA8EHT5PmgAB1bAQBAANJ24adKWpft72RaBUTgRBUCAj89HAM8xCTaBjggABRQx0DuHJv25P9dCkWRZVIAAiBjoFImpmjlFBgA0NpsjadByDacgIDAEAIAAQmYpjoGYgAZSBsmGPw6DtZiiFA8CoJguDmAQmoZ2QvtUKQLdoAYmBTwgdEiCAA)
likely benign
LLM, confidence 0.92
Compressed playground segment in the readme's second section.
Reasoning
Same compressed playground URL segment in the readme. It is a documentation artefact, not an obfuscated payload.
-
line length 576 characters (raw pass, confidence 0.50)
[Playground](https://typescript-play.js.org/?target=6#code/JYOwLgpgTgZghgYwgAgIImAWzgG2QbwChlks4BzCAVShwC5kBnMKUcgbmKYAcIFgIjBs1YgOXMpSFMWbANoBdTiW5woFddwAW0kfKWEAvoUIB6U8gDCUCHEiNkICAHdkYAJ69kz4GC3JcPG4oAHteKDABBxCYNAxsPFBIWEQUCAAPJG4wZABySUFcgJAAEzMLXNV1ck0dIuCw6EjBADpy5AB1FAQ4EGQAV0YUP2AHDy8wEOQbUugmBLwtEIA3OcmQnEj
-
base64-like blob (504 bytes, compression ratio 0.79) (raw pass, confidence 0.60)
yground](https://typescript-play.js.org/?target=6#code/JYOwLgpgTgZghgYwgAgIImAWzgG2QbwChlks4BzCAVShwC5kBnMKUcgbmKYAcIFgIjBs1YgOXMpSFMWbANoBdTiW5woFddwAW0kfKWEAvoUIB6U8gDCUCHEiNkICAHdkYAJ69kz4GC3JcPG4oAHteKDABBxCYNAxsPFBIWEQUCAAPJG4wZABySUFcgJAAEzMLXNV1ck0dIuCw6EjBADpy5AB1FAQ4EGQAV0YUP2AHDy8wEOQbUugmBLwtEIA3OcmQnEjuZBgQ
likely benign
LLM, confidence 0.95
Compressed TypeScript playground link in a later readme section.
Reasoning
This is a typescript-play URL carrying compressed code in a documentation link. The base64-like blob is the playground's encoded state, and the surrounding markdown is ordinary prose.
-
20 of 36 non-conventional identifiers are single-character (56%) (token pass, confidence 0.50)
-
file mixes tab and space indentation (41 tab-indented and 2 space-indented lines) (raw pass, confidence 0.40)
type MergeObjectToArray<TArray extends UnknownArray, TObject, TArrayCopy extends UnknownArray = TArray> =
TObject extends UnknownArray
-
file mixes tab and space indentation (34 tab-indented and 1 space-indented lines) (raw pass, confidence 0.40)
export type TagContainer<Token> = {
readonly [tag]: Token;
};
-
file mixes tab and space indentation (2 tab-indented and 23 space-indented lines) (raw pass, confidence 0.40)
## Web/API types
- Blob
- File
-
line length 3028 characters (raw pass, confidence 0.65)
expectType<LargeTuple>({} as [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
dismissed
LLM, confidence 0.97
Very long tuple literal in a TypeScript type-test assertion.
Reasoning
The long line is a type-level test with a literal tuple type expression of repeated 1s, used to check large tuple inference. Long generated literals are normal in type tests and carry no security risk.
-
line length 6035 characters (raw pass, confidence 0.65)
expectType<VeryLargeTuple>({} as [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1
dismissed
LLM, confidence 0.97
Very large tuple literal in a type-test assertion.
Reasoning
This is the same kind of type-test assertion with an even larger tuple literal, exercising type performance on big tuples. It is a legitimate test fixture with no obfuscation.
Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.
disclude.io