Loading npm security reports…
Opening index.html runs an obfuscated browser payload that obtains and follows a concealed redirect destination. The apparent Cloudflare challenge masks this behavior.
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.htmlView on unpkg · L182A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.htmlView on unpkgThe HTML entry point invokes a hidden redirect callback after a Turnstile challenge.
index.htmlView on unpkg · L178The package disguises the behavior as a Cloudflare challenge while concealing the destination.
index.htmlView on unpkg · L7This report applies to luftzxyuiwgbgsp@1.0.0.
See version security history for other recorded verdicts.
Evidence last updated: .
Source advisory published: .
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.htmlView on unpkg · L182A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.htmlView on unpkgThe HTML entry point invokes a hidden redirect callback after a Turnstile challenge.
index.htmlView on unpkg · L178The package disguises the behavior as a Cloudflare challenge while concealing the destination.
index.htmlView on unpkg · L7