Loading npm security reports…
AUTHORISED SECURITY RESEARCH — dependency confusion proof of concept. This package was published because the name appeared in publicly served code but was unregistered on the public registry. If it is in your dependency tree, your resolver fetched an inte
Installation automatically collects host, user, network, path, and consuming-project metadata. It exfiltrates the data through DNS plus HTTP and HTTPS callbacks.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgA manifest entrypoint or package-local install chain reaches a fixed external POST callback.
index.jsView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
index.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
index.jsView on unpkgReads consuming project metadata from INIT_CWD/package.json.
index.jsView on unpkg · L36Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L11Reads consuming project metadata from INIT_CWD/package.json.
index.jsView on unpkg · L36A manifest entrypoint or package-local install chain reaches a fixed external POST callback.
index.jsView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
index.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
index.jsView on unpkg