Loading npm security reports…
The main HTML entry presents a challenge page, obtains a concealed remote host, and redirects the browser after challenge handling. The obfuscation prevents the redirect destination from being transparently reviewed.
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.htmlView on unpkg · L182A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.htmlView on unpkgThe page loads Cloudflare Turnstile and invokes a redirect callback after challenge completion.
index.htmlView on unpkg · L9The page loads Cloudflare Turnstile and invokes a redirect callback after challenge completion.
index.htmlView on unpkg · L178A large obfuscated script performs a remote fetch to construct a host URL, then redirects the browser.
index.htmlView on unpkg · L183A large obfuscated script performs a remote fetch to construct a host URL, then redirects the browser.
index.htmlView on unpkg · L183The package's declared main entry is an HTML page rather than a library module.
package.jsonView on unpkg · L2This report applies to ndmcmsujey@1.0.0.
See version security history for other recorded verdicts.
Evidence last updated: .
Source advisory published: .
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.htmlView on unpkg · L182A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.htmlView on unpkgThe page loads Cloudflare Turnstile and invokes a redirect callback after challenge completion.
index.htmlView on unpkg · L9The page loads Cloudflare Turnstile and invokes a redirect callback after challenge completion.
index.htmlView on unpkg · L178A large obfuscated script performs a remote fetch to construct a host URL, then redirects the browser.
index.htmlView on unpkg · L183A large obfuscated script performs a remote fetch to construct a host URL, then redirects the browser.
index.htmlView on unpkg · L183The package's declared main entry is an HTML page rather than a library module.
package.jsonView on unpkg · L2