Loading npm security reports…
@monkeyplus/flow package-first runtime with Vite, Nitro, Vue and a workspace playground.
Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
Package contains a critical-looking secret pattern.
skills/vueuse-functions/references/useJwt.mdView on unpkg · L21Supabase service role key (JWT) in skills/vueuse-functions/references/useJwt.md
skills/vueuse-functions/references/useJwt.mdView on unpkg · L21Package source references dynamic require/import behavior.
server/renderer.mjsView on unpkg · L24Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
cms/dist/assets/api-DZ54n4La.jsView on unpkg · L203Package contains a critical-looking secret pattern.
skills/vueuse-functions/references/useJwt.mdView on unpkg · L21Supabase service role key (JWT) in skills/vueuse-functions/references/useJwt.md
skills/vueuse-functions/references/useJwt.mdView on unpkg · L21Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
cms/dist/assets/api-DZ54n4La.jsView on unpkg · L203Package source references dynamic require/import behavior.
server/renderer.mjsView on unpkg · L24