Loading npm security reports…
## Hướng dẫn sử dụng
Importing either browser entrypoint can activate targeted protestware. It persists a date, then disrupts affected pages and streams looping audio.
Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
dist/index.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/index.jsView on unpkgAfter three days it disables all page pointer interaction, injects looping audio, and plays media from an external host.
dist/index.jsView on unpkg · L14912For Russian-language users on specified domains, code waits over three days then disables pointer interaction and injects looping external audio.
dist/index.mjsView on unpkg · L14874This report applies to @esvndev/es-react-import-export@1.2.40.
See version security history for other recorded verdicts.
Evidence last updated: .
Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
dist/index.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/index.jsView on unpkgAfter three days it disables all page pointer interaction, injects looping audio, and plays media from an external host.
dist/index.jsView on unpkg · L14912For Russian-language users on specified domains, code waits over three days then disables pointer interaction and injects looping external audio.
dist/index.mjsView on unpkg · L14874