Loading npm security reports…
Custom detection model registry, conversion & distribution for CamStack
An explicit model-conversion action downloads a user-supplied ONNX URL. Its Hugging Face authorization guard uses an unsafe substring host check, allowing a lookalike host to receive a configured Hugging Face token.
Package source references a known benign dynamic code generation pattern.
dist/model-studio.addon.mjsView on unpkg · L149Package source references dynamic require/import behavior.
dist/index.jsView on unpkg · L1Package ships non-JavaScript build or shell helper files.
python/convert_lib.pyView on unpkgPackage hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
python/__tests__/test_convert_lib.pyView on unpkgPackage source references a known benign dynamic code generation pattern.
dist/model-studio.addon.mjsView on unpkg · L149Package source references dynamic require/import behavior.
dist/index.jsView on unpkg · L1Package ships non-JavaScript build or shell helper files.
python/convert_lib.pyView on unpkgPackage hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
python/__tests__/test_convert_lib.pyView on unpkg