Loading npm security reports…
Opening the package's HTML entry executes concealed browser code. It decrypts a destination, requests redirect policy data, and redirects the visitor.
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.htmlView on unpkg · L182A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.htmlView on unpkgThe sole browser entry loads a third-party Cloudflare challenge script.
index.htmlView on unpkg · L9The script collects visitor URL parameters and replaces the browser location with a remotely supplied redirect.
index.htmlView on unpkg · L176The package contains no stated application functionality beyond this opaque challenge-and-redirect page.
package.jsonView on unpkg · L1This report applies to kambxjowhdsgyw@1.0.2.
See version security history for other recorded verdicts.
Evidence last updated: .
Source advisory published: .
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.htmlView on unpkg · L182A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.htmlView on unpkgThe sole browser entry loads a third-party Cloudflare challenge script.
index.htmlView on unpkg · L9The script collects visitor URL parameters and replaces the browser location with a remotely supplied redirect.
index.htmlView on unpkg · L176The package contains no stated application functionality beyond this opaque challenge-and-redirect page.
package.jsonView on unpkg · L1