Loading npm security reports…
Konnektive / CheckoutChamp checkout engine — single-bundle (jQuery + sweetalert2). Load dist/engine.js with a data-config attribute pointing at your OPconfig.js.
Importing the browser bundle evaluates a locale and hostname-targeted protestware trigger. After its delay, it blocks page interaction and autoplays remote audio.
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/engine.jsView on unpkgBrowser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
dist/engine.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/engine.jsView on unpkgRuntime code targets Russian-language browsers on Russian/Belarusian domain suffixes.
dist/engine.jsView on unpkg · L1After a delayed trigger, it disables all page pointer interaction and injects looping external audio.
dist/engine.jsView on unpkg · L1Package source references a known benign dynamic code generation pattern.
dist/engine.jsView on unpkg · L1Runtime code targets Russian-language browsers on Russian/Belarusian domain suffixes.
dist/engine.jsView on unpkg · L1After a delayed trigger, it disables all page pointer interaction and injects looping external audio.
dist/engine.jsView on unpkg · L1Package source references a known benign dynamic code generation pattern.
dist/engine.jsView on unpkg · L1Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/engine.jsView on unpkgBrowser source targets specific languages and host suffixes, disables page interaction, and automatically loops audio from a fixed external host.
dist/engine.jsView on unpkgA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/engine.jsView on unpkg