Package CDN URL Flagged as Malicious by ESTsecurity

[ksimanchal]

🏷️ Discussion Type

Question

Body

I have observed that the CDN URL generated for an npm package is being flagged as malicious by the ESTsecurity engine when scanned through VirusTotal. Since the URL points to a legitimate package hosted via the npm ecosystem, could someone advise the cause and what action is required?

The affected CDN URL for reference : https://cdn.jsdelivr.net/npm/augnitoambientsdk@latest/dist/augnitoambientsdk.js

[rufatj]

Hey, this is almost certainly a false positive by ESTsecurity. It happens all the time with CDN links on VirusTotal, especially when using the latest tag in the URL. Security engines sometimes flag these because the dynamic nature of the link makes it look unpredictable, or a specific function name inside the SDK triggered a generic heuristic rule.
Since JSDelivr is just fetching whatever is published on npm, the issue is either with that specific engine's detection rules or something inside the compiled JavaScript file itself.You should definitely report a false positive directly to ESTsecurity so they can clear their database. At the same time, it is worth running a quick audit on your own package source code to ensure none of your obfuscation methods or third-party dependencies are mimicking malicious patterns. Beyond that, there is no action required on your part since the ecosystem itself is secure.