Loading npm security reports…
Un paquete de componentes minimizado
Importing the package runs a browser-targeted disruption payload. It disables interaction and plays looping remote audio for selected visitors.
Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
components.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
components.jsView on unpkgThe entrypoint targets Russian-language visitors on selected country domains.
components.jsView on unpkg · L30182After a three-day local-storage delay, it disables page interaction and loops remote audio.
components.jsView on unpkg · L30185Package source references a known benign dynamic code generation pattern.
components.jsView on unpkg · L30017package.json makes components.js the runtime entrypoint.
package.jsonView on unpkg · L1This report applies to dgrcorrientes-modulos@1.0.199.
See version security history for other recorded verdicts.
Evidence last updated: .
Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
components.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
components.jsView on unpkgThe entrypoint targets Russian-language visitors on selected country domains.
components.jsView on unpkg · L30182After a three-day local-storage delay, it disables page interaction and loops remote audio.
components.jsView on unpkg · L30185Package source references a known benign dynamic code generation pattern.
components.jsView on unpkg · L30017package.json makes components.js the runtime entrypoint.
package.jsonView on unpkg · L1