v2.6.3

Security

• Switch to https://github.com/orgads/isolated-vm because patriksimek/vm2#533 is vulnerable and discontinued

Performance

• Faster webpack matching when a function has many statements

v2.6.2

Bug Fixes

• deobfuscation fails with comments (#13)

v2.6.1

Bug Fixes

• babel traverse ^7.22.7 noScope regression workaround

v2.6.0

Features

• unpack webpack 0.11 and development builds
• handle external browserify dependencies without an id like { 'vscode': undefined }
• allow stdin/stdout for cli: echo '1+1' | webcrack, webcrack input.js > output.js
• dedicated debug logger which is disabled when using webcrack as a dependency
• convert JSON.parse("[1,2,3]") to [1, 2, 3]
• detect for (; []; ) { as infinite loop
• detect inverted dead code conditions: if (!("abc" !== "xyz")) {
• path mappings not starting with ./ (e.g. { lodash: m.numericLiteral(4) }) are now treated as node_modules

Bug Fixes

• detect top-level bundle first (previously it always tried to find a nested webpack bundle before browserify)
• apply bundle transforms regardless of saving (when using the js api)
• stricter readonly object checks for control flow flattening (ignore const a = { x: 1 }; a.x++; etc)

Performance

• 40% faster string array and decoder renaming
• faster unminify/unpack transforms

v2.5.1

New documentation site: https://webcrack.netlify.app/docs and easier to install (no native node addons).

Performance

• unminify: 660% faster
• evaluate number expressions: 110% faster
• debug protection: 90% faster
• self defending: 85% faster
• control flow: 80% faster
• merge strings: 65% faster
• inline decoded strings: 45% faster
• deobfuscate: 40% faster

v2.5.0

Performance

• Up to 1200% faster string array deobfuscation (quickjs-emscripten -> isolated-vm/sandybox)

Features

• Unpack latest version of browserify

v2.4.0

Features

• unpack browserify bundles

Bug Fixes

• always use / for paths (depended on the operating system previously)

v2.3.0

Features

• Convert react components back to JSX.

React.createElement(
  'div',
  null,
  React.createElement('span', null, 'Hello ', name)
);

->

<div>
  <span>Hello {name}</span>
</div>

v2.2.0

Features

• Extract webpack v5

v2.1.3

Bug Fixes

• Extract variable sequence in loop (#7): for(let a = (b, c);;) {} -> b; for(let a = c;;) {}