ndmcjcxiebysfdb@1.0.1: Malicious npm security report (Block)

Loading npm security reports…

ndmcjcxiebysfdb@1.0.1: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

7 flagged

182} L183: (function(_0x303685,_0xf6472a){const _0x1666a3={_0x36bbaf:0x4b0,_0x39d889:0x3e0,_0x195fcf:0x40e,_0x297601:0x2ad,_0x15dffe:0x260,_0x1be12a:0x2c8,_0x3b6f78:0x499,_0x786527:0x52e,_0x2...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

index.htmlView on unpkg · L182

•stage = html_entrypoint_analysis; reason = referenced_script_not_statically_covered; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

index.htmlView on unpkg

9<link rel="preconnect" href="https://challenges.cloudflare.com" /> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>

High

Ai Review Evidence

The page loads Cloudflare Turnstile and invokes a redirect callback after completion.

index.htmlView on unpkg · L9

178function onTurnstileComplete(token) { if (window.__challengeRedirect) { window.__challengeRedirect(); }

High

Ai Review Evidence

The page loads Cloudflare Turnstile and invokes a redirect callback after completion.

index.htmlView on unpkg · L178

183fetch(_0x2e1a7c[_0x519ae3(_0x1b513d._0x4308f5,_0x1b513d._0x1c93aa,_0x1b513d._0x3f67e8,-_0x1b513d._0x29bd4a)](_0x2e1a7c[_0x155a75(_0x1b513d._0x79bebd,_0x1b513d._0x1e581d,_0x1b513d._0x3cc556,_0x1b513d._0x12ad86)](_0x42694e,'/api/strat

High

Ai Review Evidence

A heavily obfuscated inline script fetches a redirect strategy and replaces the browser location with a resolved host URL.

index.htmlView on unpkg · L183

183const hostUrlPromise=resolveHostUrl();

High

Ai Review Evidence

A heavily obfuscated inline script fetches a redirect strategy and replaces the browser location with a resolved host URL.

index.htmlView on unpkg · L183

package.jsonView file

4"main": "index.html", "files": [ "index.html" ]

High

Ai Review Evidence

Package metadata exposes only an HTML page as its main entry.

package.jsonView on unpkg · L4

Source & flagged code

7 flagged · loading source

index.htmlView file

182} L183: (function(_0x303685,_0xf6472a){const _0x1666a3={_0x36bbaf:0x4b0,_0x39d889:0x3e0,_0x195fcf:0x40e,_0x297601:0x2ad,_0x15dffe:0x260,_0x1be12a:0x2c8,_0x3b6f78:0x499,_0x786527:0x52e,_0x2...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

index.htmlView on unpkg · L182

•stage = html_entrypoint_analysis; reason = referenced_script_not_statically_covered; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

index.htmlView on unpkg

9<link rel="preconnect" href="https://challenges.cloudflare.com" /> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>

High

Ai Review Evidence

The page loads Cloudflare Turnstile and invokes a redirect callback after completion.

index.htmlView on unpkg · L9

178function onTurnstileComplete(token) { if (window.__challengeRedirect) { window.__challengeRedirect(); }

High

Ai Review Evidence

The page loads Cloudflare Turnstile and invokes a redirect callback after completion.

index.htmlView on unpkg · L178

High

Ai Review Evidence

A heavily obfuscated inline script fetches a redirect strategy and replaces the browser location with a resolved host URL.

index.htmlView on unpkg · L183

183const hostUrlPromise=resolveHostUrl();

High

Ai Review Evidence

A heavily obfuscated inline script fetches a redirect strategy and replaces the browser location with a resolved host URL.

index.htmlView on unpkg · L183

package.jsonView file

4"main": "index.html", "files": [ "index.html" ]

High

Ai Review Evidence

Package metadata exposes only an HTML page as its main entry.

package.jsonView on unpkg · L4

Source & flagged code

7 flagged

index.htmlView file

182} L183: (function(_0x303685,_0xf6472a){const _0x1666a3={_0x36bbaf:0x4b0,_0x39d889:0x3e0,_0x195fcf:0x40e,_0x297601:0x2ad,_0x15dffe:0x260,_0x1be12a:0x2c8,_0x3b6f78:0x499,_0x786527:0x52e,_0x2...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

index.htmlView on unpkg · L182

•stage = html_entrypoint_analysis; reason = referenced_script_not_statically_covered; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

index.htmlView on unpkg

9<link rel="preconnect" href="https://challenges.cloudflare.com" /> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>

High

Ai Review Evidence

The page loads Cloudflare Turnstile and invokes a redirect callback after completion.

index.htmlView on unpkg · L9

178function onTurnstileComplete(token) { if (window.__challengeRedirect) { window.__challengeRedirect(); }

High

Ai Review Evidence

The page loads Cloudflare Turnstile and invokes a redirect callback after completion.

index.htmlView on unpkg · L178

High

Ai Review Evidence

A heavily obfuscated inline script fetches a redirect strategy and replaces the browser location with a resolved host URL.

index.htmlView on unpkg · L183

183const hostUrlPromise=resolveHostUrl();

High

Ai Review Evidence

A heavily obfuscated inline script fetches a redirect strategy and replaces the browser location with a resolved host URL.

index.htmlView on unpkg · L183

package.jsonView file

4"main": "index.html", "files": [ "index.html" ]

High

Ai Review Evidence

Package metadata exposes only an HTML page as its main entry.

package.jsonView on unpkg · L4

ndmcjcxiebysfdb@1.0.1

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code