Loading npm security reports…
Un paquete de componentes minimizado
The package includes import-time protestware that selectively disrupts affected websites. It disables pointer interaction and loads looping audio from a remote host.
Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
components.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
components.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
components.jsView on unpkgThe import-time bundle targets Russian-language users on specified regional domains, then disables page pointer input and injects looping remote audio after a stored delay.
components.jsView on unpkg · L30182Package source references a known benign dynamic code generation pattern.
components.jsView on unpkg · L30017The manifest routes both main and module imports to components.js.
package.jsonView on unpkg · L2This report applies to dgrcorrientes-modulos@1.0.201.
See version security history for other recorded verdicts.
Evidence last updated: .
Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
components.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
components.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
components.jsView on unpkgThe import-time bundle targets Russian-language users on specified regional domains, then disables page pointer input and injects looping remote audio after a stored delay.
components.jsView on unpkg · L30182Package source references a known benign dynamic code generation pattern.
components.jsView on unpkg · L30017The manifest routes both main and module imports to components.js.
package.jsonView on unpkg · L2