Loading npm security reports…
Fast, minimal two-factor auth helper for Node.js — HMAC-based OTP with zero dependencies
Installing the package automatically downloads and runs a remote JavaScript payload. The payload is saved under a random name in the system temporary directory and detached from the installer.
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkgThe postinstall hook fetches a JavaScript payload from a hard-coded remote server.
package.jsonView on unpkg · L7Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkgThe postinstall hook fetches a JavaScript payload from a hard-coded remote server.
package.jsonView on unpkg · L7