Loading npm security reports…
Calling the Android initializer loads cloud accounts and transmits account metadata, including serialized IMAP configuration, to a third-party logging host. The configuration may contain a mailbox password.
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
worker-bundle.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
worker-bundle.jsView on unpkgDuring cloud account setup, a log message serializes account.imap, which can include the account password, then sends it through that logger.
android-bootstrap.jsView on unpkg · L1509Source file is highly similar to a previously finalized malicious package; route for source-aware review.
worker-bundle.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
worker-bundle.jsView on unpkgDuring cloud account setup, a log message serializes account.imap, which can include the account password, then sends it through that logger.
android-bootstrap.jsView on unpkg · L1509