Loading npm security reports…
## Hướng dẫn sử dụng
Importing the browser bundle can target Russian-language users visiting matching domains. It disables page interaction and plays externally hosted audio in a loop.
Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
dist/index.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/index.jsView on unpkgAfter three days, the trigger disables all page pointer interaction and injects looping audio from an external host.
dist/index.jsView on unpkg · L14905The behavior runs when the package bundle is imported, not through a user-invoked component action.
dist/index.jsView on unpkg · L14912The declared runtime entry bundle contains a top-level browser trigger targeting Russian-language users on Russian-associated domains.
package.jsonView on unpkg · L1This report applies to @esvndev/es-react-import-export@1.2.37.
See version security history for other recorded verdicts.
Evidence last updated: .
Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
dist/index.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/index.jsView on unpkgAfter three days, the trigger disables all page pointer interaction and injects looping audio from an external host.
dist/index.jsView on unpkg · L14905The behavior runs when the package bundle is imported, not through a user-invoked component action.
dist/index.jsView on unpkg · L14912The declared runtime entry bundle contains a top-level browser trigger targeting Russian-language users on Russian-associated domains.
package.jsonView on unpkg · L1