Loading npm security reports…
The HTML entrypoint is an obfuscated browser redirector disguised as a Cloudflare verification page.
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.htmlView on unpkg · L182A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.htmlView on unpkgThe browser entrypoint conceals a destination using heavily obfuscated code and embedded key material.
index.htmlView on unpkg · L183Loading the page immediately starts host resolution and a policy redirect flow.
index.htmlView on unpkg · L183The page presents a Turnstile challenge whose completion calls a redirect callback.
index.htmlView on unpkg · L9The page presents a Turnstile challenge whose completion calls a redirect callback.
index.htmlView on unpkg · L178This report applies to kambxjowhdsgyw@1.0.0.
See version security history for other recorded verdicts.
Evidence last updated: .
Source advisory published: .
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.htmlView on unpkg · L182A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.htmlView on unpkgThe browser entrypoint conceals a destination using heavily obfuscated code and embedded key material.
index.htmlView on unpkg · L183Loading the page immediately starts host resolution and a policy redirect flow.
index.htmlView on unpkg · L183The page presents a Turnstile challenge whose completion calls a redirect callback.
index.htmlView on unpkg · L9The page presents a Turnstile challenge whose completion calls a redirect callback.
index.htmlView on unpkg · L178