Loading npm security reports…
A lightweight string formatting helper with capitalize, truncate and normalize utilities
Installing the package triggers an outbound request that exfiltrates the installing host's hostname and current username. The behavior is unrelated to the advertised string helpers.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
postinstall.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
postinstall.jsView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L7Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L7Source file is highly similar to a previously finalized malicious package; route for source-aware review.
postinstall.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
postinstall.jsView on unpkg