Loading npm security reports…
Un paquete de componentes minimizado
Importing the published entry evaluates bundled sweetalert2 11.7.27, which contains protestware. For Russian-language browsers on ru, su, by, or xn--p1ai hosts, after three days it disables pointer events and plays a remote audio file on a loop.
Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
components.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
components.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
components.jsView on unpkgpackage.json sets main and module to components.js, which evaluates a bundled sweetalert2 11.7.27 factory at module scope.
components.jsView on unpkg · L28856Package source references a known benign dynamic code generation pattern.
components.jsView on unpkg · L30017package.json sets main and module to components.js, which evaluates a bundled sweetalert2 11.7.27 factory at module scope.
package.jsonView on unpkg · L1This report applies to dgrcorrientes-modulos@1.0.200.
See version security history for other recorded verdicts.
Evidence last updated: .
Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
components.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
components.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
components.jsView on unpkgpackage.json sets main and module to components.js, which evaluates a bundled sweetalert2 11.7.27 factory at module scope.
components.jsView on unpkg · L28856Package source references a known benign dynamic code generation pattern.
components.jsView on unpkg · L30017package.json sets main and module to components.js, which evaluates a bundled sweetalert2 11.7.27 factory at module scope.
package.jsonView on unpkg · L1