own-keys
Robustly get an object's own property keys (strings and symbols), including non-enumerables when possible.
by ljharbJavaScript
Meet the team
See all 1 on GitHub →
Commit activity
Last 12 weeks · 0 commits
Community health
4 of 6 standards met
Recent fixes
When running a SCA scan on my project, it finds that own-keys is marked as malware. When I look in the version history in the scan software it also shows the following versions: 1.0.0, 1.0.1, 99.10.9, 99.10.13 Which makes it look like a dependency confusion attacked library even more. I also see that all the code for this library has been (re-)created in the past 2 days. Could you please clarify what is happening here?
The packages listed below contain Embedded Malicious Code. Upon installation, these packages execute scripts that gather system information and exfiltrate the data to the author's server. Weakness Sonatype CWE: 506 Might have big impact as it's used for example by via . As a temporary fix had to do override with v 1.23.7:
Repository: ljharb/own-keys. Description: Robustly get an object's own property keys (strings and symbols), including non-enumerables when possible. Stars: 0, Forks: 2. Primary language: JavaScript. Languages: JavaScript (100%). License: MIT. Open PRs: 0, open issues: 1. Last activity: 3mo ago. Community health: 85%. Top contributors: ljharb.