如何通过CLI直接混淆动态JS代码而非依赖文件？

DevOps 小满

2026-5-15

How to Obfuscate Inline JavaScript Code Without Saving to a File

Great question! You don’t need to write your JavaScript code to a file first to use javascript-obfuscator—there are two simple, effective ways to handle inline code directly from your terminal or via a quick Node.js script.

Method 1: Use Standard Input (stdin) with the Command Line

The javascript-obfuscator CLI supports reading input from stdin and writing output to stdout (your console). Here’s how to do it:

For single-line code

Use echo piped to the obfuscator, and specify --output - to send the result straight to your console:

echo "var foo = 'bar'; alert(foo);" | javascript-obfuscator --output -

For multi-line code

If you have longer, formatted code, use a bash here-string (this preserves line breaks and prevents shell variable expansion):

javascript-obfuscator --output - << 'EOF'
var foo = 'bar';
alert(foo);
function greet(name) {
  return `Hello, ${name}!`;
}
EOF

Wrapping EOF in single quotes ensures your code is passed exactly as-written, with no unwanted shell interpretation.

Method 2: Use the Node.js API Directly

If you need more flexibility (like dynamic code generation or custom obfuscation rules), you can create a tiny Node.js script to call the javascript-obfuscator API directly:

First, install the package locally (recommended for project-specific use):

npm install javascript-obfuscator

Create a script (e.g., obfuscate-inline.js) with this code:

const JavaScriptObfuscator = require('javascript-obfuscator');

// Replace this with your inline code or dynamically generated content
const inputCode = `var foo = 'bar'; alert(foo);`;

// Adjust these options to match your obfuscation needs
const obfuscationOptions = {
  compact: true,
  controlFlowFlattening: false,
  deadCodeInjection: false
};

const obfuscatedCode = JavaScriptObfuscator.obfuscate(inputCode, obfuscationOptions).getObfuscatedCode();

// Print the result to the console
console.log(obfuscatedCode);