Loading npm security reports…
React
Importing the browser bundle activates a targeted disruption payload. It blocks interaction and plays remote audio for selected visitors after a stored delay.
Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
dist/index.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkgA single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L13Package source references a known benign dynamic code generation pattern.
dist/index.jsView on unpkg · L24This report applies to es-workflow-template@0.4.35.
See version security history for other recorded verdicts.
Evidence last updated: .
Browser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
dist/index.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkgA single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L13Package source references a known benign dynamic code generation pattern.
dist/index.jsView on unpkg · L24