Loading npm security reports…
## Hướng dẫn sử dụng
The browser bundle contains targeted disruptive behavior for Russian-language sessions on selected country-code domains. After a three-day delay, it disables page interaction and plays a looping external audio file.
Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
dist/index.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkgIn Russian-language browser sessions on hosts ending in .ru, .su, .by, or .xn--p1ai, the bundle records an initiation date and activates after three days.
dist/index.jsView on unpkg · L14906After activation, the bundle disables page interaction and loops audio from an external anthem URL.
dist/index.jsView on unpkg · L14912The package exposes dist/index.js as its main entrypoint, so the bundled browser behavior is reachable when the package is loaded.
package.jsonView on unpkg · L19This report applies to @esvndev/es-react-import-export@1.2.41.
See version security history for other recorded verdicts.
Evidence last updated: .
Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
dist/index.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkgIn Russian-language browser sessions on hosts ending in .ru, .su, .by, or .xn--p1ai, the bundle records an initiation date and activates after three days.
dist/index.jsView on unpkg · L14906After activation, the bundle disables page interaction and loops audio from an external anthem URL.
dist/index.jsView on unpkg · L14912The package exposes dist/index.js as its main entrypoint, so the bundled browser behavior is reachable when the package is loaded.
package.jsonView on unpkg · L19