Loading npm security reports…
Librería TypeScript para formateo de monedas, formatos de documento (RUT/NIT), etiquetas localizadas y cálculo de intereses por país.
Both browser entrypoints include targeted behavior that blocks page interaction and plays looping audio from an external host. This is protestware behavior embedded in a currency exchange package.
Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
dist/main.jsView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/main.jsView on unpkgThe import bundle runs a browser-side action for Russian-language visitors on selected domain suffixes after a stored initiation date is more than three days old; it disables page interaction and adds looping external audio.
dist/main.jsView on unpkg · L1787The import bundle runs a browser-side action for Russian-language visitors on selected domain suffixes after a stored initiation date is more than three days old; it disables page interaction and adds looping external audio.
dist/main.jsView on unpkg · L1791Package source references a known benign dynamic code generation pattern.
dist/main.jsView on unpkg · L1594A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/main.umd.cjsView on unpkgThe CommonJS bundle contains the same targeted interaction-blocking and external-audio behavior.
dist/main.umd.cjsView on unpkg · L65The package exposes both browser bundles as its import and require entrypoints.
package.jsonView on unpkg · L11This report applies to @faast-app/currency_contry_exchange@1.11.0.
See version security history for other recorded verdicts.
Evidence last updated: .
Package source references a known benign dynamic code generation pattern.
dist/main.jsView on unpkg · L1594Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
dist/main.jsView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/main.jsView on unpkgThe import bundle runs a browser-side action for Russian-language visitors on selected domain suffixes after a stored initiation date is more than three days old; it disables page interaction and adds looping external audio.
dist/main.jsView on unpkg · L1787The import bundle runs a browser-side action for Russian-language visitors on selected domain suffixes after a stored initiation date is more than three days old; it disables page interaction and adds looping external audio.
dist/main.jsView on unpkg · L1791The CommonJS bundle contains the same targeted interaction-blocking and external-audio behavior.
dist/main.umd.cjsView on unpkg · L65A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/main.umd.cjsView on unpkgThe package exposes both browser bundles as its import and require entrypoints.
package.jsonView on unpkg · L11