undici 7.30.1

Source: https://github.com/nodejs/undici
Tag scanned: v7.30.1
Compared with: v7.30.0 (14 signals introduced since)
Files: 720 scanned, 25 skipped (binary, oversized, or unrecognised)
Signals: 0 critical · 0 warn · 57 info
Scan time: 34.4 s
LLM review: Reviewed by claude-haiku-5-5 (Anthropic): 54 of 54 warn and critical signals; 54 demoted to info.
Disclude version: 4.0.0
Scanned (UTC): 2026-10-16 11:26

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:12:18 new in this release

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
const skip = runtimeFeatures.has('crypto') === false
const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='

test('should ignore well-formed but unknown algorithm tokens', { skip }, (t) => {
```
dismissed LLM, confidence 0.92 Base64 SHA-256 hash constant in a security regression test.
Reasoning
The constant is the standard SHA-256 digest of 'Hello world!' used as a test hash for a regression test on unknown algorithm tokens. Legitimate test fixture.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:25:20 new in this release

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
likely benign LLM, confidence 0.97 Base64 SRI digest constants used in a test file.
Reasoning
These are SRI hash strings (sha256/384/512 digests of 'Hello world!') in a test file for subresource integrity. The base64 is a legitimate digest, not an encoded payload.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:26:20 new in this release

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
likely benign LLM, confidence 0.97 Base64 SRI digest constant in a test fixture.
Reasoning
Same SRI test fixture; the 384/512-bit base64 digests are expected hash values for the test's integrity checks.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:27:20 new in this release

base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
```
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
likely benign LLM, confidence 0.97 Base64 SRI digest constant in a test fixture.
Reasoning
A sha384 base64 digest string in an SRI test file, used to verify integrity behavior; raw-pass base64 heuristic match with no malicious context.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:59:25 new in this release

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash256Wrong = 'MWD71RGgcch4KOzmR6VMaqWh4VY7eonYmHWvemOtMno='
  const hash384Wrong = 'zxSYGGGjWi7iIZ9SmiTenQIQ+/nzPTd5bbesJhBTZvoYomj28rsVLXbUyJU/Yqob'
  const hash512Wrong = 'eC9loL1pd8AD1Btp9aHu+ymH5Rfnh64hiTYgyfeXy270KfjPQupBkhb2OeP35vZA8ofSBNJ01LzweDIhznuqaw=='
```
likely benign LLM, confidence 0.97 Deliberately incorrect base64 SRI digests for negative test cases.
Reasoning
Intentionally wrong SRI digests used as negative test cases for a security advisory regression test (GHSA-f72v-6w45-q472). Benign test data.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:60:25 new in this release

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const hash256Wrong = 'MWD71RGgcch4KOzmR6VMaqWh4VY7eonYmHWvemOtMno='
  const hash384Wrong = 'zxSYGGGjWi7iIZ9SmiTenQIQ+/nzPTd5bbesJhBTZvoYomj28rsVLXbUyJU/Yqob'
  const hash512Wrong = 'eC9loL1pd8AD1Btp9aHu+ymH5Rfnh64hiTYgyfeXy270KfjPQupBkhb2OeP35vZA8ofSBNJ01LzweDIhznuqaw=='
```
likely benign LLM, confidence 0.97 Incorrect base64 SRI digest used as a negative test fixture.
Reasoning
Wrong-hash fixture for an SRI negative test; base64 digest value is expected in this context.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:61:25 new in this release

base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
```
  const hash384Wrong = 'zxSYGGGjWi7iIZ9SmiTenQIQ+/nzPTd5bbesJhBTZvoYomj28rsVLXbUyJU/Yqob'
  const hash512Wrong = 'eC9loL1pd8AD1Btp9aHu+ymH5Rfnh64hiTYgyfeXy270KfjPQupBkhb2OeP35vZA8ofSBNJ01LzweDIhznuqaw=='

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
likely benign LLM, confidence 0.97 Incorrect base64 SRI digest used as a negative test fixture.
Reasoning
Wrong sha512 digest fixture in an SRI regression test; no obfuscation or execution involved.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:95:25 new in this release

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  await t.assert.doesNotReject(fetch(`http://localhost:${server.address().port}`, {
    integrity: 'sha1024-MWD71RGgcch4KOzmR6VMaqWh4VY7eonYmHWvemOtMno='
  }))
})
```
likely benign LLM, confidence 0.96 Base64 integrity string used in a fetch test assertion.
Reasoning
Base64 digest inside an integrity option for a fetch test (sha1024 prefix is a deliberate invalid algorithm test case). Benign test code.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:101:20 new in this release

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
likely benign LLM, confidence 0.97 Base64 SRI digest constant in a test fixture.
Reasoning
Repeated SRI digest constants in the same test file; standard hash fixtures for integrity verification.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:102:20 new in this release

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
likely benign LLM, confidence 0.97 Base64 SRI digest constant in a test fixture.
Reasoning
Same SRI digest fixture repeated in the test; benign.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:103:20 new in this release

base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
```
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
  const hash256Wrong = 'MWD71RGgcch4KOzmR6VMaqWh4VY7eonYmHWvemOtMno='
```
likely benign LLM, confidence 0.97 Base64 SRI digest constant in a test fixture.
Reasoning
Standard sha384 digest fixture in an SRI test file; raw base64 heuristic false positive.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:104:25 new in this release

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
  const hash256Wrong = 'MWD71RGgcch4KOzmR6VMaqWh4VY7eonYmHWvemOtMno='
  const hash384Wrong = 'zxSYGGGjWi7iIZ9SmiTenQIQ+/nzPTd5bbesJhBTZvoYomj28rsVLXbUyJU/Yqob'
```
likely benign LLM, confidence 0.97 Incorrect base64 SRI digest used as a negative test fixture.
Reasoning
Wrong-hash negative test fixture for SRI verification; base64 digest is expected test data.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:105:25 new in this release

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const hash256Wrong = 'MWD71RGgcch4KOzmR6VMaqWh4VY7eonYmHWvemOtMno='
  const hash384Wrong = 'zxSYGGGjWi7iIZ9SmiTenQIQ+/nzPTd5bbesJhBTZvoYomj28rsVLXbUyJU/Yqob'
  const hash512Wrong = 'eC9loL1pd8AD1Btp9aHu+ymH5Rfnh64hiTYgyfeXy270KfjPQupBkhb2OeP35vZA8ofSBNJ01LzweDIhznuqaw=='
```
likely benign LLM, confidence 0.97 Base64 SRI hash test fixture constants.
Reasoning
These are hash strings in a test fixture for subresource integrity (wrong hashes intentionally). Raw base64 pattern on a digest in a test file; legitimate.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/GHSA-f72v-6w45-q472.js:106:25 new in this release

base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
```
  const hash384Wrong = 'zxSYGGGjWi7iIZ9SmiTenQIQ+/nzPTd5bbesJhBTZvoYomj28rsVLXbUyJU/Yqob'
  const hash512Wrong = 'eC9loL1pd8AD1Btp9aHu+ymH5Rfnh64hiTYgyfeXy270KfjPQupBkhb2OeP35vZA8ofSBNJ01LzweDIhznuqaw=='

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
likely benign LLM, confidence 0.97 Base64 SRI hash constant in a test file.
Reasoning
Same SRI test fixture with a 384-bit base64 digest; expected content in an integrity test suite.

info long-line README.md:3:1

line length 521 characters (raw pass, confidence 0.50)

[![Node CI](https://github.com/nodejs/undici/actions/workflows/ci.yml/badge.svg)](https://github.com/nodejs/undici/actions/workflows/nodejs.yml) [![neostandard javascript style](https://img.shields.io/badge/neo-standard-7fffff?style=flat\&labelColor=ff80ff)](https://github.com/neostandard/neostandard) [![npm version](h

info long-line docs/docs/api/api-lifecycle.md:61:1

line length 920 characters (raw pass, confidence 0.50)

The **idle** state is the initial state of a `Client` instance. While an `origin` is required for instantiating a `Client` instance, the underlying socket connection will not be established until a request is queued using [`Client.dispatch()`](/docs/docs/api/Client.md#clientdispatchoptions-handlers). By calling `Client

info long-line lib/llhttp/constants.js:3:1

line length 636 characters (raw pass, confidence 0.50)

exports.SPECIAL_HEADERS = exports.MINOR = exports.MAJOR = exports.HTAB_SP_VCHAR_OBS_TEXT = exports.QUOTED_STRING = exports.CONNECTION_TOKEN_CHARS = exports.HEADER_CHARS = exports.TOKEN = exports.HEX = exports.URL_CHAR = exports.USERINFO_CHARS = exports.MARK = exports.ALPHANUM = exports.NUM = exports.HEX_MAP = exports.N

info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:171:1

base64-like blob (700 bytes over 10 lines, compression ratio 0.79) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0
U29mdHdhcmUAQWRvYmUgSW1hZ2VSZWFkeXHJZTwAAAGdSURBVDjLpVMxa8JAFL6rAQUHXQoZpLU/
oUOnDtKtW/MDBFHHThUKTgrqICgOEtd2EVxb2qFkKTgVChbSCnZTiVBEMBRLiEmafleCDaWxDX3w
```
likely benign LLM, confidence 0.95 Base64-encoded PNG image embedded as a multipart upload fixture in busboy's parser test.
Reasoning
The blob is a base64-encoded PNG (the iVBORw0KGgo header) embedded in a multipart test fixture inside a template literal. Busboy's parser tests need realistic binary upload payloads, so this is expected test data. Raw-pass base64 heuristics fire on it with no malicious context.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:188:1

base64-like blob (940 bytes over 13 lines, compression ratio 0.79) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0
U29mdHdhcmUAQWRvYmUgSW1hZ2VSZWFkeXHJZTwAAAJRSURBVBgZpcHda81xHMDx9+d3fudYzuYw
2RaZ5yTWolEiuZpCSjGJFEktUUr8A6ZxQZGHmDtqdrGUXHgoeZqSp1F2bLFWjtkOB8PZzvmd7+dj
```
likely benign LLM, confidence 0.95 Base64-encoded PNG image used as test upload data in busboy's parser tests.
Reasoning
Another base64 PNG block (iVBORw0KGgo header) in the same busboy multipart test file, used as file upload content. It is a legitimate test fixture for parsing binary form data.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:254:1

base64-like blob (1044 bytes over 14 lines, compression ratio 0.79) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0
U29mdHdhcmUAQWRvYmUgSW1hZ2VSZWFkeXHJZTwAAAKfSURBVDjLpZPrS1NhHMf9O3bOdmwDCWRE
IYKEUHsVJBI7mg3FvCxL09290jZj2EyLMnJexkgpLbPUanNOberU5taUMnHZUULMvelCtWF0sW/n
```
likely benign LLM, confidence 0.95 Base64-encoded PNG test fixture for multipart parsing.
Reasoning
Base64 PNG payload inside a multipart test fixture in busboy's test suite. The raw pass flags length and entropy only, and the context is ordinary test data for file uploads.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:275:1

base64-like blob (980 bytes over 13 lines, compression ratio 0.79) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0
U29mdHdhcmUAQWRvYmUgSW1hZ2VSZWFkeXHJZTwAAAJvSURBVDjLpZPrS5NhGIf9W7YvBYOkhlko
qCklWChv2WyKik7blnNris72bi6dus0DLZ0TDxW1odtopDs4D8MDZuLU0kXq61CijSIIasOvv94V
```
likely benign LLM, confidence 0.95 Base64-encoded PNG fixture for busboy multipart upload tests.
Reasoning
Same pattern: a base64 PNG blob in a busboy test template literal representing an uploaded file. Raw base64 heuristics fire on fixture data, not on obfuscated code.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:336:1

base64-like blob (776 bytes over 11 lines, compression ratio 0.79) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0
U29mdHdhcmUAQWRvYmUgSW1hZ2VSZWFkeXHJZTwAAAHYSURBVDjLlVLPS1RxHJynpVu7KEn0Vt+2
l6IO5qGCIsIwCPwD6hTUaSk6REoUHeoQ0qVAMrp0COpY0SUIPVRgSl7ScCUTst6zIoqg0y7lvpnP
```
likely benign LLM, confidence 0.95 Base64-encoded PNG file part inside a multipart test body.
Reasoning
Base64 PNG content inside a multipart body string in busboy's test file. The data is a file part of a test request, and nothing in the snippet executes or decodes it at runtime.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:354:1

base64-like blob (980 bytes over 13 lines, compression ratio 0.79) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0
U29mdHdhcmUAQWRvYmUgSW1hZ2VSZWFkeXHJZTwAAAJvSURBVDjLhZNNSFRRFIC/N++9eWMzhkl/
ZJqFMQMRFvTvImkXSdKiVRAURBRRW1eZA9EqaNOiFlZEtQxKyrJwUS0K+qEQzaTE/AtLHR3Hmffu
```
likely benign LLM, confidence 0.95 Base64-encoded PNG test payload in busboy's parser tests.
Reasoning
A base64 PNG fixture in a busboy test, consistent with the other blobs in this file. It is test payload data and the raw-pass finding is a false positive from the base64 heuristic.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:376:1

base64-like blob (3212 bytes over 43 lines, compression ratio 0.71) (raw pass, confidence 0.60)
```
        `
LS0tLS0tV2ViS2l0Rm9ybUJvdW5kYXJ5amRTRmhjQVJrOGZ5R055Ng0KQ29udGVudC1EaXNwb3Np
dGlvbjogZm9ybS1kYXRhOyBuYW1lPSJmaWxlMSI7IGZpbGVuYW1lPSJndGstYXBwbHkucG5nIg0K
Q29udGVudC1UeXBlOiBpbWFnZS9wbmcNCg0KiVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACN
```
likely benign LLM, confidence 0.95 Base64-encoded multipart body with an embedded PNG, used as a busboy test fixture.
Reasoning
The snippet begins with base64 for a multipart boundary and headers (LS0tLS0t decodes to '------'), then an embedded PNG. This is a serialized multipart request body used as test input, a common way to test form parsers.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:427:1

base64-like blob (1336 bytes over 18 lines, compression ratio 0.77) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAABHNCSVQICAgIfAhkiAAAAAlwSFlz
AAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAANnSURB
VDiNldJ9aJVVHAfw7znPuS/PvW4405WbLWfbsBuNbramq5Tp7mLqIFPXINlwpAitaCAPjWKgBdXz
```
likely benign LLM, confidence 0.95 Base64-encoded PNG sample image used as upload test data.
Reasoning
Base64 PNG content (with an Inkscape metadata string in the encoded data) in a busboy test fixture. Test files commonly embed real sample images like this for upload parsing.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:452:1

base64-like blob (1272 bytes over 17 lines, compression ratio 0.78) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAABHNCSVQICAgIfAhkiAAAAAlwSFlz
AAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAAM1SURB
VDiNrZTPaxtHFMc/M7uzs7KobckyDjQxtoPbnlJyMBRKgsGFHkwvvfbuU/+BQCilBHrof+BT7zmV
```
likely benign LLM, confidence 0.95 Base64-encoded PNG sample used as upload test data in busboy.
Reasoning
Another base64 PNG block of the same kind as the neighboring fixtures in this test file. It is test data for multipart file uploads.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:478:1

base64-like blob (2400 bytes over 32 lines, compression ratio 0.70) (raw pass, confidence 0.60)
```
        `
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS03ZDkxYjAzYTIwMTI4DQpDb250ZW50LURpc3Bv
c2l0aW9uOiBmb3JtLWRhdGE7IG5hbWU9ImZpbGUxIjsgZmlsZW5hbWU9IkM6XFB5dGhvbjI1XHd6
dGVzdFx3ZXJremV1Zy1tYWluXHRlc3RzXG11bHRpcGFydFxmaXJlZm94My0ycG5nMXR4dFxmaWxl
```
likely benign LLM, confidence 0.93 Base64-encoded multipart body with a Windows filename, used as a busboy parser test case.
Reasoning
Base64 of a multipart body with a Windows-style filename path and embedded content. This is a test case for filename handling in busboy's parser. The path is a string inside test data and is not decoded or executed by the code.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:518:1

base64-like blob (700 bytes over 10 lines, compression ratio 0.79) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0
U29mdHdhcmUAQWRvYmUgSW1hZ2VSZWFkeXHJZTwAAAGdSURBVDjLpVMxa8JAFL6rAQUHXQoZpLU/
oUOnDtKtW/MDBFHHThUKTgrqICgOEtd2EVxb2qFkKTgVChbSCnZTiVBEMBRLiEmafleCDaWxDX3w
```
likely benign LLM, confidence 0.95 Base64-encoded PNG test fixture in busboy's multipart tests.
Reasoning
Same base64 PNG fixture as the earlier findings in this file, shown in a multipart test body. The raw-pass base64 heuristic flags it, but the context is clearly test data.
info ~~warn~~ → info by review encoding-base64 test/busboy/test-parser.js:535:1

base64-like blob (940 bytes over 13 lines, compression ratio 0.79) (raw pass, confidence 0.60)
```
                `
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAABGdBTUEAAK/INwWK6QAAABl0RVh0
U29mdHdhcmUAQWRvYmUgSW1hZ2VSZWFkeXHJZTwAAAJRSURBVBgZpcHda81xHMDx9+d3fudYzuYw
2RaZ5yTWolEiuZpCSjGJFEktUUr8A6ZxQZGHmDtqdrGUXHgoeZqSp1F2bLFWjtkOB8PZzvmd7+dj
```
likely benign LLM, confidence 0.95 Base64-encoded PNG test fixture for busboy upload parsing.
Reasoning
Base64 PNG blob identical in pattern to the other fixtures in this busboy test file. Nothing in the snippet decodes or executes it, so it is a false positive from the raw base64 heuristic.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:25:17

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
dismissed LLM, confidence 0.95 Base64 SRI hash constant in a fetch integrity test.
Reasoning
The blob is the base64 SHA-256 digest of 'Hello world!', used as an expected integrity value in a Subresource Integrity test. Raw base64 pass has a high false-positive rate, and the test context is legitimate.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:63:17

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
dismissed LLM, confidence 0.95 Base64 SRI hash constant in a fetch integrity test.
Reasoning
Same SHA-256 digest of 'Hello world!' used as an expected integrity value in a test file. No encoded payload or execution path.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:94:17

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
dismissed LLM, confidence 0.95 Base64 SRI hash constant in a fetch integrity test.
Reasoning
Same SHA-256 digest used as an expected integrity value in a test. Legitimate fixture data.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:110:17

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
dismissed LLM, confidence 0.95 Base64 SHA-384 SRI hash constant in a test.
Reasoning
This is the base64 SHA-384 digest of 'Hello world!', an expected value for an SRI test. Legitimate test fixture.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:126:24

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  await t.assert.rejects(fetch(`http://localhost:${server.address().port}`, {
    integrity: 'sha384-ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs='
  }))
})
```
dismissed LLM, confidence 0.93 Intentionally invalid SRI hash string in a rejection test.
Reasoning
A truncated base64 value in an integrity option of a rejection test, which is deliberately malformed to check failure handling. Not an obfuscated payload.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:132:17

base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
dismissed LLM, confidence 0.93 Base64 SHA-512 SRI hash constant in a test.
Reasoning
This is the base64 SHA-512 digest of 'Hello world!', an expected value for an SRI test. Legitimate test fixture.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:148:24

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  await t.assert.rejects(fetch(`http://localhost:${server.address().port}`, {
    integrity: 'sha512-ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs='
  }))
})
```
dismissed LLM, confidence 0.92 Intentionally invalid SRI hash string in a rejection test.
Reasoning
A deliberately malformed sha512 integrity string in a rejection test. Test data for negative cases.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:154:20

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
dismissed LLM, confidence 0.95 Base64 SHA-384 SRI hash constant in a test.
Reasoning
The same SHA-384 digest as an expected hash value in a test. Legitimate fixture.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:244:19

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const sha256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const sha384 = 'ä'
```
likely benign LLM, confidence 0.85 SRI test fixture with a non-ASCII edge-case value.
Reasoning
The base64 value is a SHA-256 digest fixture. The non-ASCII 'ä' on the next line is an odd edge-case input for a test of invalid hashes, not a hidden payload, though it is worth a glance.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:265:19

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  const body = 'Hello world!'
  const sha256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const sha384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const sha512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
dismissed LLM, confidence 0.95 Multi-algorithm SRI digest test vectors.
Reasoning
A group of standard SHA-256, SHA-384, and SHA-512 digests of 'Hello world!' used as test vectors. Legitimate.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:266:19

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const sha256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const sha384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const sha512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
dismissed LLM, confidence 0.95 Multi-algorithm SRI digest test vectors.
Reasoning
Standard SRI digest test vectors for the same known input. Legitimate.
info ~~warn~~ → info by review encoding-base64 test/fetch/integrity.js:267:19

base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
```
  const sha384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const sha512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='

  const server = createServer({ joinDuplicateHeaders: true }, (req, res) => {
```
dismissed LLM, confidence 0.95 Multi-algorithm SRI digest test vectors.
Reasoning
Standard SRI digest test vectors for the same known input. Legitimate.
info ~~critical~~ → info by review proxy-global-hijack test/install.js:13:27

`new Proxy(globalThis, ...)` interposes on a global object — every property read goes through the handler (ast pass, confidence 0.90)
```
  // and no other properties are added to globalThis by undici.install().
  const proxyGlobalThis = new Proxy(globalThis, {
    set (target, prop, value) {
      if (exportsToCheck.has(prop)) {
```
likely benign LLM, confidence 0.85 Test-only Proxy over globalThis that checks for unexpected global property writes.
Reasoning
The Proxy wraps globalThis in a test file. Its comment says it verifies that undici.install() adds no unexpected globals, and the set trap is a checker. The critical severity comes from the generic global-hijack pattern, but in a test harness it is a legitimate assertion mechanism.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/apply-algorithm-to-bytes.js:12:20

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  /* Hash values generated with for "Hello world!" */
  const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
likely benign LLM, confidence 0.97 Known sha256 base64 digest in SRI test.
Reasoning
Hash values for 'Hello world!' documented in a comment, used as expected SRI digests in tests of the subresource-integrity library.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/apply-algorithm-to-bytes.js:13:20

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
likely benign LLM, confidence 0.97 Known sha384 base64 digest in SRI test.
Reasoning
Expected hash digest constant in an SRI test file; the comment explicitly explains its origin.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/apply-algorithm-to-bytes.js:14:20

base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
```
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='

  test('valid sha256', { skip }, (t) => {
```
likely benign LLM, confidence 0.97 Known sha512 base64 digest in SRI test.
Reasoning
Expected sha512 digest constant in an SRI test; no execution or obfuscation involved.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:15:26

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  test('identical strings, actualValue has one padding char', (t) => {
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs='
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs'
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue))
```
likely benign LLM, confidence 0.96 Base64 test string with padding in comparison test.
Reasoning
Base64 string literals used as comparison inputs for a case-sensitive match test with padding variants. Test data only.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:22:28

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs'
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs='
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue))
  })
```
likely benign LLM, confidence 0.96 Base64 test string without padding in comparison test.
Reasoning
Same base64 test-value pair testing padding handling; benign test fixture.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:28:28

base64-like blob (45 bytes, compression ratio 1.24) (raw pass, confidence 0.60)
```
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs'
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs=='
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue))
  })
```
likely benign LLM, confidence 0.96 Base64 test string with two padding chars.
Reasoning
Base64 test strings with double padding used in a comparison test; benign.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:33:26

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  test('identical strings, both have one padding char', (t) => {
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs='
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs='
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue))
```
likely benign LLM, confidence 0.96 Base64 test string with one padding char, identical pair.
Reasoning
Identical base64 test fixtures for a case-sensitive equality test; benign.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:34:28

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs='
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs='
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue))
  })
```
likely benign LLM, confidence 0.96 Base64 test string repeated in comparison test.
Reasoning
Duplicate base64 test fixture in the same test; benign test data.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:39:26

base64-like blob (45 bytes, compression ratio 1.24) (raw pass, confidence 0.60)
```
  test('identical strings, both have two padding chars', (t) => {
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs=='
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs=='
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue))
```
likely benign LLM, confidence 0.96 Base64 test string with two padding chars, identical pair.
Reasoning
Base64 test strings with two padding characters for equality test; benign.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:40:28

base64-like blob (45 bytes, compression ratio 1.24) (raw pass, confidence 0.60)
```
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs=='
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs=='
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue))
  })
```
likely benign LLM, confidence 0.95 A base64 hash string literal used as test input for case-sensitive matching.
Reasoning
Raw-pass base64 signal on a test fixture string used as a hash value in a subresource-integrity test; this is expected test data, not obfuscation.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:45:26

base64-like blob (45 bytes, compression ratio 1.24) (raw pass, confidence 0.60)
```
  test('identical strings, expectedValue has invalid third padding char', (t) => {
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs=='
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs==='
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue) === false)
```
likely benign LLM, confidence 0.95 Base64-like test string with intentionally invalid padding for a matching test.
Reasoning
Same base64 test fixture, deliberately malformed padding to test a negative case in an SRI test suite; legitimate test code.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/case-sensitive-match.js:46:28

base64-like blob (46 bytes, compression ratio 1.24) (raw pass, confidence 0.60)
```
    const actualValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs=='
    const expectedValue = 'ypeBEsobvcr6wjGzmiPcTaeG7/gUfE5yuYB3ha/uSLs==='
    t.assert.ok(caseSensitiveMatch(actualValue, expectedValue) === false)
  })
```
likely benign LLM, confidence 0.95 Base64 hash test string in an assertion of a non-matching value.
Reasoning
Repeated base64 test fixture within a unit test for SRI comparison; no execution or hidden payload.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/parse-metadata.js:12:20

base64-like blob (44 bytes, compression ratio 1.25) (raw pass, confidence 0.60)
```
  /* Hash values generated with for "Hello world!" */
  const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
likely benign LLM, confidence 0.95 SHA-256 base64 digest constant used in SRI metadata parsing tests.
Reasoning
Hash values are documented in a comment as generated for 'Hello world!', typical of SRI metadata parsing tests.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/parse-metadata.js:13:20

base64-like blob (64 bytes, compression ratio 1.17) (raw pass, confidence 0.60)
```
  const hash256 = 'wFNeS+K3n/2TKRMFQ2v4iTFOSj+uwF7P/Lt98xrZ5Ro='
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='
```
likely benign LLM, confidence 0.95 SHA-384 base64 digest constant used in SRI metadata tests.
Reasoning
Hash constant with explanatory comment in a metadata parsing test; ordinary fixture data.
info ~~warn~~ → info by review encoding-base64 test/subresource-integrity/parse-metadata.js:14:20

base64-like blob (88 bytes, compression ratio 1.12) (raw pass, confidence 0.60)
```
  const hash384 = 'hiVfosNuSzCWnq4X3DTHcsvr38WLWEA5AL6HYU6xo0uHgCY/JV615lypu7hkHMz+'
  const hash512 = '9s3ioPgZMUzd5V/CJ9jX2uPSjMVWIioKitZtkcytSq1glPUXohgjYMmqz2o9wyMWLLb9jN/+2w/gOPVehf+1tg=='

  test('should parse valid metadata with option', { skip }, (t) => {
```
likely benign LLM, confidence 0.95 SHA-512 base64 digest constant used as a test fixture.
Reasoning
SHA-512 base64 digest constant in a test fixture for parsing integrity metadata; benign.

Reproduce This Scan

Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.0.0
git clone https://github.com/nodejs/undici undici && cd undici
git checkout v7.30.1
disclude scan --severity info --diff v7.30.0 .