Loading npm security reports…
ZeroGPU device-side SLM runtime SDK for browsers and Chrome (MV3) extensions
At runtime, an orchestrator task can supply an HTTPS tracking script that the SDK injects into the host document. The SDK also sends device profiling data to its orchestrator.
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/assets/transformers.min.jsView on unpkg · L27A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/assets/transformers.min.jsView on unpkgPackage source references a known benign dynamic code generation pattern.
dist/assets/transformers.min.jsView on unpkg · L33Package source references dynamic require/import behavior.
dist/extension/zerogpu-offscreen.jsView on unpkg · L3945This report applies to @zerogpu/browser-extension-sdk@0.2.4.
See version security history for other recorded verdicts.
Evidence last updated: .
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/assets/transformers.min.jsView on unpkg · L27A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/assets/transformers.min.jsView on unpkgPackage source references a known benign dynamic code generation pattern.
dist/assets/transformers.min.jsView on unpkg · L33Package source references dynamic require/import behavior.
dist/extension/zerogpu-offscreen.jsView on unpkg · L3945