Summary
Togoder Security scanned the npm package abitype@1.3.0 on Oct 4, 2026. An AI review of 103 source files produced no findings. No malicious behavior, install-time payloads, credential theft or exfiltration were identified.
0
critical
0
high
0
medium
0
low
Findings
No findings. The reviewer saw nothing malicious or risky in this version.
Files reviewed
| File | Verdict | What the reviewer saw |
|---|---|---|
| dist/cjs/abi.js | safe | No malicious patterns detected |
| dist/cjs/abis/human-readable.js | safe | No malicious patterns detected |
| dist/cjs/errors.js | safe | The file contains only error class definitions with no network, filesystem, credential, or dynamic code execution patterns. |
| dist/cjs/exports/abis.js | safe | No malicious patterns detected; the file only re-exports ABI definitions from internal modules. |
| dist/cjs/exports/index.js | safe | No malicious patterns detected; the file only re-exports symbols from local modules without any suspicious behavior. |
| dist/cjs/exports/zod.js | safe | No malicious patterns detected |
| dist/cjs/generated.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/errors/abiItem.js | safe | This file only defines three custom error classes extending a base error and contains no malicious patterns, network activity, file access, or dynamic code execution. |
| dist/cjs/human-readable/errors/abiParameter.js | safe | No malicious patterns detected; the file only defines custom error classes for ABI parameter parsing. |
| dist/cjs/human-readable/errors/signature.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/errors/splitParameters.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/errors/struct.js | safe | No malicious patterns detected; the file merely defines a custom error class extending an internal BaseError. |
| dist/cjs/human-readable/formatAbi.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/formatAbiItem.js | safe | No malicious patterns detected; this file only formats ABI items using pure string manipulation and a single internal relative import. |
| dist/cjs/human-readable/formatAbiParameter.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/formatAbiParameters.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/parseAbi.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/parseAbiItem.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/parseAbiParameter.js | safe | No malicious patterns detected; the code is a legitimate ABI parameter parser with no exfiltration, dynamic execution, or suspicious behavior. |
| dist/cjs/human-readable/parseAbiParameters.js | safe | No malicious patterns detected; the code is a pure utility for parsing ABI parameter strings without network, file system, or dynamic code execution activity. |
| dist/cjs/human-readable/runtime/cache.js | safe | No malicious patterns detected; the code only defines a parameter cache and key generation function with no network, filesystem, process, or dynamic code execution behavior. |
| dist/cjs/human-readable/runtime/signatures.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/runtime/structs.js | safe | No malicious patterns detected; the code is a standard ABI struct parser with no network, filesystem, process, or dynamic execution behavior. |
| dist/cjs/human-readable/runtime/utils.js | safe | No malicious patterns detected; the code is a standard ABI signature parser with no network, filesystem, credential, or dynamic execution activity. |
| dist/cjs/human-readable/types/signatures.js | safe | No malicious patterns detected |
Show 78 more files
| File | Verdict | What the reviewer saw |
|---|---|---|
| dist/cjs/human-readable/types/structs.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/types/utils.js | safe | The file contains only a CommonJS module export marker and a source map comment; no executable or malicious code is present. |
| dist/cjs/narrow.js | safe | The file contains a single trivial identity function 'narrow' with no network, filesystem, process, obfuscation, or dynamic execution patterns. |
| dist/cjs/regex.js | safe | This file only defines regular expressions and a typed regex helper function with no malicious patterns detected. |
| dist/cjs/register.js | safe | No malicious patterns detected |
| dist/cjs/types.js | safe | No malicious patterns detected |
| dist/cjs/utils.js | safe | The file contains only a CommonJS module export marker and a source map comment; no executable or malicious code is present. |
| dist/cjs/version.js | safe | No malicious patterns detected |
| dist/cjs/zod.js | safe | The code is a Zod schema definition for Ethereum ABI and EIP-712 typed data validation, with no malicious patterns such as data exfiltration, credential harvesting, dynamic code execution, or network activity. |
| dist/esm/abi.js | safe | No malicious patterns detected |
| dist/esm/abis/human-readable.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/errors.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/exports/abis.js | safe | The file only re-exports ABI constants from sibling modules with no executable code or malicious patterns. |
| dist/esm/exports/index.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/exports/zod.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/generated.js | safe | No malicious patterns detected |
| dist/esm/human-readable/errors/abiItem.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/errors/abiParameter.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/errors/signature.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/errors/splitParameters.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/errors/struct.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/formatAbi.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/formatAbiItem.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/formatAbiParameter.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/formatAbiParameters.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/parseAbi.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/parseAbiItem.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/parseAbiParameter.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/parseAbiParameters.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/runtime/cache.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/runtime/signatures.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/runtime/structs.js | safe | No malicious patterns detected; the file is a pure ABI struct parser with no network, filesystem, process, or dynamic code execution behavior. |
| dist/esm/human-readable/runtime/utils.js | safe | No malicious patterns detected; the code is a pure ABI signature parser with no network, filesystem, process, or dynamic execution behavior. |
| dist/esm/human-readable/types/signatures.js | safe | The file contains only an empty export statement and a source map comment, with no executable code or malicious patterns. |
| dist/esm/human-readable/types/structs.js | safe | The file contains only an empty export statement and a source map reference, with no executable or suspicious code. |
| dist/esm/human-readable/types/utils.js | safe | No malicious patterns detected |
| dist/esm/narrow.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/regex.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/register.js | safe | No malicious patterns detected |
| dist/esm/types.js | safe | No malicious patterns detected |
| dist/esm/utils.js | safe | No malicious patterns detected |
| dist/esm/version.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/zod.js | safe | The file contains only Zod schema definitions for Ethereum ABI and EIP-712 typed data validation, with no malicious patterns detected. |
| src/abi.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/abis/human-readable.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/abis/json.ts | safe | The file contains only static ABI definitions and no executable or malicious code. |
| src/errors.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/exports/abis.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/exports/index.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/exports/zod.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/generated.ts | safe | No malicious patterns detected; the file is a benign TypeScript interface declaring a static type mapping for ABI parameter name lookups. |
| src/human-readable/errors/abiItem.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/errors/abiParameter.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/errors/signature.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/errors/splitParameters.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/errors/struct.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/formatAbi.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/formatAbiItem.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/formatAbiParameter.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/formatAbiParameters.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/parseAbi.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/parseAbiItem.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/parseAbiParameter.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/parseAbiParameters.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/runtime/cache.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/runtime/signatures.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/runtime/structs.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/runtime/utils.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/types/signatures.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/types/structs.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/types/utils.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/narrow.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/regex.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/register.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/types.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/utils.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/version.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/zod.ts | safe | Cleared by Jev triage; no further analysis needed |
Affected version ranges
None of the 4 scanned versions of abitype are flagged high or critical. The latest scanned version, 1.3.0, is clean. Only versions we have scanned are listed; unscanned versions between them are not covered.
1.0.61.3.0
| Versions | Verdict | Count | Range | Top findings |
|---|---|---|---|---|
| 1.3.0 | No issues | 1 | 1.3.0 | |
| 1.2.3 | Not scanned | 1 | 1.2.3 | |
| 1.0.6 – 1.1.0 | No issues | 3 | >=1.0.6 <=1.1.0 |
Full list, including published versions not scanned yet: version ranges API.
Scanned versions of abitype
Frequently asked questions
Is abitype safe to use?
Our AI source review of abitype@1.3.0 found no malicious code: no install-time payloads, credential theft, exfiltration, obfuscated loaders or backdoors.
Does abitype contain malware?
No malware was identified in abitype@1.3.0 when Togoder Security scanned it on Oct 4, 2026. A new version can still introduce malicious code, so scan the exact versions in your lockfile.
How was abitype checked?
Togoder Security downloaded the published npm package and had an AI model read its 103 source files, looking for install scripts, credential access, network exfiltration, obfuscation, backdoors and crypto-wallet theft. The results are cached by file hash and shown here.
How do I scan abitype together with the rest of my dependencies?
Upload your lockfile at https://security.togoder.click/scan or call the API documented at https://security.togoder.click/api-docs. Files that have already been scanned, like the ones in abitype@1.3.0, cost nothing.