Loading npm security reports…
No automatic install-time attack surface was found. Importing the library or running its CLI executes opaque, obfuscated code that cannot be fully verified by static review.
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
bin/cli-obfuscated.jsView on unpkg · L46Package source references dynamic require/import behavior.
bin/cli-obfuscated.jsView on unpkg · L46A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
lib/browser/mathbase-obfuscated.jsView on unpkgThe user-invoked CLI is heavily obfuscated, concealing its runtime behavior.
package.jsonView on unpkg · L158Both import and require entry points lead to obfuscated runtime code.
package.jsonView on unpkg · L104This report applies to mathsbase@1.0.2.
See version security history for other recorded verdicts.
Evidence last updated: .
Source advisory published: .
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
bin/cli-obfuscated.jsView on unpkg · L46Package source references dynamic require/import behavior.
bin/cli-obfuscated.jsView on unpkg · L46A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
lib/browser/mathbase-obfuscated.jsView on unpkgThe user-invoked CLI is heavily obfuscated, concealing its runtime behavior.
package.jsonView on unpkg · L158Both import and require entry points lead to obfuscated runtime code.
package.jsonView on unpkg · L104