Loading npm security reports…
common-js
The browser entrypoint contains an obfuscated Xelis cryptocurrency miner. It automatically starts when loaded in a browser, obtains configuration remotely, and uses workers plus WebSocket mining-pool communication.
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/common-js.jsView on unpkg · L1Published browser entrypoint is a 770KB one-line obfuscated payload that brands itself XelisMiner.
dist/common-js.jsView on unpkg · L1Importing it in a browser auto-instantiates the miner and invokes its start method.
dist/common-js.jsView on unpkg · L1The payload fetches a configurable remote configuration, opens WebSockets, and creates Worker instances for computation.
dist/common-js.jsView on unpkg · L1The payload fetches a configurable remote configuration, opens WebSockets, and creates Worker instances for computation.
dist/common-js.jsView on unpkg · L1Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/common-js.jsView on unpkg · L1Published browser entrypoint is a 770KB one-line obfuscated payload that brands itself XelisMiner.
dist/common-js.jsView on unpkg · L1Importing it in a browser auto-instantiates the miner and invokes its start method.
dist/common-js.jsView on unpkg · L1The payload fetches a configurable remote configuration, opens WebSockets, and creates Worker instances for computation.
dist/common-js.jsView on unpkg · L1The payload fetches a configurable remote configuration, opens WebSockets, and creates Worker instances for computation.
dist/common-js.jsView on unpkg · L1