Summary
Togoder Security scanned the npm package abitype@1.0.8 on Oct 4, 2026. An AI review of 100 source files produced no findings. No malicious behavior, install-time payloads, credential theft or exfiltration were identified.
0
critical
0
high
0
medium
0
low
Findings
No findings. The reviewer saw nothing malicious or risky in this version.
Files reviewed
| File | Verdict | What the reviewer saw |
|---|---|---|
| dist/cjs/abi.js | safe | No malicious patterns detected |
| dist/cjs/abis/human-readable.js | safe | No malicious patterns detected |
| dist/cjs/errors.js | safe | The file contains only error class definitions with no network, filesystem, credential, or dynamic code execution patterns. |
| dist/cjs/exports/abis.js | safe | No malicious patterns detected; the file only re-exports ABI definitions from internal modules. |
| dist/cjs/exports/index.js | safe | No malicious patterns detected; the file only re-exports symbols from local modules without any suspicious behavior. |
| dist/cjs/exports/zod.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/errors/abiItem.js | safe | This file only defines three custom error classes extending a base error and contains no malicious patterns, network activity, file access, or dynamic code execution. |
| dist/cjs/human-readable/errors/abiParameter.js | safe | No malicious patterns detected; the file only defines custom error classes for ABI parameter parsing. |
| dist/cjs/human-readable/errors/signature.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/errors/splitParameters.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/errors/struct.js | safe | No malicious patterns detected; the file merely defines a custom error class extending an internal BaseError. |
| dist/cjs/human-readable/formatAbi.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/formatAbiItem.js | safe | No malicious patterns detected; this file only formats ABI items using pure string manipulation and a single internal relative import. |
| dist/cjs/human-readable/formatAbiParameter.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/formatAbiParameters.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/parseAbi.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/parseAbiItem.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/parseAbiParameter.js | safe | No malicious patterns detected; the code is a legitimate ABI parameter parser with no exfiltration, dynamic execution, or suspicious behavior. |
| dist/cjs/human-readable/parseAbiParameters.js | safe | No malicious patterns detected; the code is a pure utility for parsing ABI parameter strings without network, file system, or dynamic code execution activity. |
| dist/cjs/human-readable/runtime/cache.js | safe | No malicious patterns detected; the file only defines a static cache and a pure string-building function with no I/O, network, process execution, or dynamic code loading. |
| dist/cjs/human-readable/runtime/signatures.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/runtime/structs.js | safe | No malicious patterns detected; the code performs pure ABI struct parsing with no network, filesystem, process, or dynamic execution behavior. |
| dist/cjs/human-readable/runtime/utils.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/types/signatures.js | safe | No malicious patterns detected |
| dist/cjs/human-readable/types/structs.js | safe | No malicious patterns detected |
Show 75 more files
| File | Verdict | What the reviewer saw |
|---|---|---|
| dist/cjs/human-readable/types/utils.js | safe | The file contains only a CommonJS module export marker and a source map comment; no executable or malicious code is present. |
| dist/cjs/narrow.js | safe | The file contains a single trivial identity function 'narrow' with no network, filesystem, process, obfuscation, or dynamic execution patterns. |
| dist/cjs/regex.js | safe | This file only defines regular expressions and a typed regex helper function with no malicious patterns detected. |
| dist/cjs/register.js | safe | No malicious patterns detected |
| dist/cjs/types.js | safe | No malicious patterns detected |
| dist/cjs/utils.js | safe | The file contains only a CommonJS module export marker and a source map comment; no executable or malicious code is present. |
| dist/cjs/version.js | safe | No malicious patterns detected |
| dist/cjs/zod.js | safe | No malicious patterns detected; the code only defines Zod schemas for Ethereum ABI and EIP-712 typed data validation. |
| dist/esm/abi.js | safe | No malicious patterns detected |
| dist/esm/abis/human-readable.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/errors.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/exports/abis.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/exports/index.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/exports/zod.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/errors/abiItem.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/errors/abiParameter.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/errors/signature.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/errors/splitParameters.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/errors/struct.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/formatAbi.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/formatAbiItem.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/formatAbiParameter.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/formatAbiParameters.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/parseAbi.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/parseAbiItem.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/parseAbiParameter.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/parseAbiParameters.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/runtime/cache.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/runtime/signatures.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/human-readable/runtime/structs.js | safe | No malicious patterns detected; the code only parses ABI struct signatures without any network, filesystem, process, or dynamic execution activity. |
| dist/esm/human-readable/runtime/utils.js | safe | No malicious patterns detected; the code is a standard parser for ABI signatures and parameters with no network, filesystem, process, or dynamic execution activity. |
| dist/esm/human-readable/types/signatures.js | safe | The file contains only an empty export statement and a source map comment, with no executable code or malicious patterns. |
| dist/esm/human-readable/types/structs.js | safe | The file contains only an empty export statement and a source map reference, with no executable or suspicious code. |
| dist/esm/human-readable/types/utils.js | safe | No malicious patterns detected |
| dist/esm/narrow.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/regex.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/register.js | safe | No malicious patterns detected |
| dist/esm/types.js | safe | No malicious patterns detected |
| dist/esm/utils.js | safe | No malicious patterns detected |
| dist/esm/version.js | safe | Cleared by Jev triage; no further analysis needed |
| dist/esm/zod.js | safe | No malicious patterns detected; the file contains legitimate Zod schemas for validating Ethereum ABI and EIP-712 typed data. |
| src/abi.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/abis/human-readable.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/abis/json.ts | safe | The file contains only static ABI definitions and no executable or malicious code. |
| src/errors.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/exports/abis.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/exports/index.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/exports/zod.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/errors/abiItem.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/errors/abiParameter.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/errors/signature.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/errors/splitParameters.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/errors/struct.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/formatAbi.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/formatAbiItem.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/formatAbiParameter.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/formatAbiParameters.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/parseAbi.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/parseAbiItem.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/parseAbiParameter.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/parseAbiParameters.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/runtime/cache.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/runtime/signatures.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/runtime/structs.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/runtime/utils.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/types/signatures.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/types/structs.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/human-readable/types/utils.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/narrow.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/regex.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/register.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/types.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/utils.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/version.ts | safe | Cleared by Jev triage; no further analysis needed |
| src/zod.ts | safe | Cleared by Jev triage; no further analysis needed |
Affected version ranges
None of the 4 scanned versions of abitype are flagged high or critical. The latest scanned version, 1.3.0, is clean. Only versions we have scanned are listed; unscanned versions between them are not covered.
1.0.61.3.0
| Versions | Verdict | Count | Range | Top findings |
|---|---|---|---|---|
| 1.3.0 | No issues | 1 | 1.3.0 | |
| 1.2.3 | Not scanned | 1 | 1.2.3 | |
| 1.0.6 – 1.1.0 | No issues | 3 | >=1.0.6 <=1.1.0 |
Full list, including published versions not scanned yet: version ranges API.
Scanned versions of abitype
Frequently asked questions
Is abitype safe to use?
Our AI source review of abitype@1.0.8 found no malicious code: no install-time payloads, credential theft, exfiltration, obfuscated loaders or backdoors.
Does abitype contain malware?
No malware was identified in abitype@1.0.8 when Togoder Security scanned it on Oct 4, 2026. A new version can still introduce malicious code, so scan the exact versions in your lockfile.
How was abitype checked?
Togoder Security downloaded the published npm package and had an AI model read its 100 source files, looking for install scripts, credential access, network exfiltration, obfuscation, backdoors and crypto-wallet theft. The results are cached by file hash and shown here.
How do I scan abitype together with the rest of my dependencies?
Upload your lockfile at https://security.togoder.click/scan or call the API documented at https://security.togoder.click/api-docs. Files that have already been scanned, like the ones in abitype@1.0.8, cost nothing.