duo001/evil.js
Use with caution observed · 2026-08-28
Health v2 · maintenance only
32/100
- Activity 0
- Release rhythm 35
- Longevity 100
Flags: no_releases no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 1972
- days_rel: n/a
- days_push: 1475
- n_releases_24m: 0
Adoption not part of the score
2548 stars · 627 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
Evil.js is a JavaScript prank library that, when imported into a project, subtly sabotages built-in behavior: Array.includes lies on certain array lengths, Array.map drops elements on Sundays, setTimeout runs a second late, JSON.stringify swaps characters, and more. It is intended as a joke 'parting gift' to leave in a project, not a legitimate utility.
Use cases
- prank a coworker's codebase before leaving a job
- demonstrate how supply-chain attacks can subtly break JavaScript apps
- teach lessons about trusting third-party dependencies
- add hidden misbehavior to a project as a joke
When to choose
- you want a novelty prank library to inject subtle bugs into a JavaScript project
- you need a real-world example of malicious dependency behavior for security training
When to avoid
- any real, production, or team project - it deliberately corrupts runtime behavior
- you need reliable standard library semantics
- your organization has security or code-review policies, since this is effectively a trojan dependency
Facets
library · maturity maintenance
developer-tools security developer-tools programming-languages browser prank joke sabotage evil trojan novelty nodejs javascript
1 source
- readme: https://github.com/duo001/evil.js · fetched 2026-08-28 · db37fff079ab
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| duo001/evil.js | main | 32 |
For agents
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem