Loading npm security reports…
Importing the package loads a runtime dependency fetched from a mutable remote tarball. That dependency is not available in this snapshot, so its import-time behavior cannot be verified.
A mutable GitHub tarball is declared as a runtime dependency despite the manifest claiming zero runtime dependencies.
package.jsonView on unpkg · L4A mutable GitHub tarball is declared as a runtime dependency despite the manifest claiming zero runtime dependencies.
package.jsonView on unpkg · L41Package manifest contains a dependency pinned to a remote tarball URL.
package.jsonView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
lib/http.jsView on unpkgImporting the cache module immediately loads that opaque dependency and suppresses any error.
lib/cache.jsView on unpkg · L1The library disables TLS certificate verification while submitting supplied Discord credentials for MFA completion.
index.jsView on unpkg · L26The library disables TLS certificate verification while submitting supplied Discord credentials for MFA completion.
index.jsView on unpkg · L167This report applies to discord-mfa-solver@1.0.3.
See version security history for other recorded verdicts.
Evidence last updated: .
Source advisory published: .
A mutable GitHub tarball is declared as a runtime dependency despite the manifest claiming zero runtime dependencies.
package.jsonView on unpkg · L4A mutable GitHub tarball is declared as a runtime dependency despite the manifest claiming zero runtime dependencies.
package.jsonView on unpkg · L41Package manifest contains a dependency pinned to a remote tarball URL.
package.jsonView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
lib/http.jsView on unpkgImporting the cache module immediately loads that opaque dependency and suppresses any error.
lib/cache.jsView on unpkg · L1The library disables TLS certificate verification while submitting supplied Discord credentials for MFA completion.
index.jsView on unpkg · L26The library disables TLS certificate verification while submitting supplied Discord credentials for MFA completion.
index.jsView on unpkg · L167