Loading npm security reports…
## Hướng dẫn sử dụng
Importing either published bundle can disrupt selected users' web pages. It disables pointer input and loops remotely hosted audio after a delayed, persistent trigger.
Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
dist/index.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/index.jsView on unpkgBoth published entry bundles run a module-level condition targeting Russian-language users on Russian, Belarusian, and related domains.
dist/index.jsView on unpkg · L14905After the stored date is over three days old, the code disables all page pointer interaction and appends a looping audio element.
dist/index.jsView on unpkg · L14910Both published entry bundles run a module-level condition targeting Russian-language users on Russian, Belarusian, and related domains.
dist/index.mjsView on unpkg · L14873The audio is fetched automatically from a fixed third-party host.
dist/index.mjsView on unpkg · L14880This report applies to @esvndev/es-react-import-export@1.2.38.
See version security history for other recorded verdicts.
Evidence last updated: .
Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
dist/index.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/index.jsView on unpkgBoth published entry bundles run a module-level condition targeting Russian-language users on Russian, Belarusian, and related domains.
dist/index.jsView on unpkg · L14905After the stored date is over three days old, the code disables all page pointer interaction and appends a looping audio element.
dist/index.jsView on unpkg · L14910Both published entry bundles run a module-level condition targeting Russian-language users on Russian, Belarusian, and related domains.
dist/index.mjsView on unpkg · L14873The audio is fetched automatically from a fixed third-party host.
dist/index.mjsView on unpkg · L14880