Loading npm security reports…
adbf
The CLI/import starts an obfuscated HTTP service that acts as a chat proxy. It forwards supplied chat content to a concealed remote API after adding a hidden instruction.
Source executes local commands and sends command output to an external endpoint.
index.jsView on unpkg · L1Source appears to collect browser login credentials for exfiltration.
index.jsView on unpkg · L1Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
index.jsView on unpkg · L1A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
index.jsView on unpkg · L1This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
index.jsView on unpkgA single source file combines environment access, network access, and code or shell execution; review context before blocking.
index.jsView on unpkg · L1Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.jsView on unpkg · L1A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
index.jsView on unpkg · L1A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.jsView on unpkgPackage contains source files above the normal full-analysis size ceiling.
index.jsView on unpkgThis report applies to adbf@1.0.135.
See version security history for other recorded verdicts.
Evidence last updated: .
Source executes local commands and sends command output to an external endpoint.
index.jsView on unpkg · L1Source appears to collect browser login credentials for exfiltration.
index.jsView on unpkg · L1Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
index.jsView on unpkg · L1A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
index.jsView on unpkg · L1This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
index.jsView on unpkgA single source file combines environment access, network access, and code or shell execution; review context before blocking.
index.jsView on unpkg · L1Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.jsView on unpkg · L1A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
index.jsView on unpkg · L1A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.jsView on unpkgPackage contains source files above the normal full-analysis size ceiling.
index.jsView on unpkg