Loading npm security reports…
Internal service client library
During npm installation, the package inventories the machine and exfiltrates the results to a hard-coded remote host. Its normal module entry point is empty.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgA preinstall hook runs the collector and suppresses failures.
package.jsonView on unpkg · L6Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgThe hook gathers host, user, platform, and working-directory identifiers and sends them to a hard-coded IP address.
preinstall.jsView on unpkg · L5The hook gathers host, user, platform, and working-directory identifiers and sends them to a hard-coded IP address.
preinstall.jsView on unpkg · L19It executes system, process, directory, network, and environment-inventory commands, then posts their output.
preinstall.jsView on unpkg · L40The declared runtime entry point exports only an empty object; the package functionality is concentrated in the install hook.
index.jsView on unpkg · L1This report applies to etoro-cashout@99.0.2.
See version security history for other recorded verdicts.
Evidence last updated: .
Source advisory published: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkgA preinstall hook runs the collector and suppresses failures.
package.jsonView on unpkg · L6Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgThe hook gathers host, user, platform, and working-directory identifiers and sends them to a hard-coded IP address.
preinstall.jsView on unpkg · L5The hook gathers host, user, platform, and working-directory identifiers and sends them to a hard-coded IP address.
preinstall.jsView on unpkg · L19It executes system, process, directory, network, and environment-inventory commands, then posts their output.
preinstall.jsView on unpkg · L40The declared runtime entry point exports only an empty object; the package functionality is concentrated in the install hook.
index.jsView on unpkg · L1