Loading npm security reports…
adbf
The main module is an obfuscated server that launches on import and uses an encoded, embedded API credential and destination. It forwards chat message arrays through that concealed remote client.
Source executes local commands and sends command output to an external endpoint.
index.jsView on unpkg · L1Source appears to collect browser login credentials for exfiltration.
index.jsView on unpkg · L1Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
index.jsView on unpkg · L1A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
index.jsView on unpkg · L1This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
index.jsView on unpkgA single source file combines environment access, network access, and code or shell execution; review context before blocking.
index.jsView on unpkg · L1Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.jsView on unpkg · L1A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
index.jsView on unpkg · L1A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.jsView on unpkgPackage contains source files above the normal full-analysis size ceiling.
index.jsView on unpkgThis report applies to adbf@1.0.149.
See version security history for other recorded verdicts.
Evidence last updated: .
Source executes local commands and sends command output to an external endpoint.
index.jsView on unpkg · L1Source appears to collect browser login credentials for exfiltration.
index.jsView on unpkg · L1Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
index.jsView on unpkg · L1A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
index.jsView on unpkg · L1This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
index.jsView on unpkgA single source file combines environment access, network access, and code or shell execution; review context before blocking.
index.jsView on unpkg · L1Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.jsView on unpkg · L1A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
index.jsView on unpkg · L1A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.jsView on unpkgPackage contains source files above the normal full-analysis size ceiling.
index.jsView on unpkg