Loading npm security reports…
Give it a frame design and a photo, and it draws the photo inside the frame's border on a canvas, then hands back the combined image as a data URL.
Importing and mounting the component activates an obfuscated remote license-revocation check. A remote invalidation can cause destructive mutation of the consuming page's document.
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.jsView on unpkg · L1The advertised React entrypoint is deliberately obfuscated and embeds a remote revocation endpoint.
index.jsView on unpkg · L1The advertised React entrypoint is deliberately obfuscated and embeds a remote revocation endpoint.
index.jsView on unpkg · L1Mounting the component fetches remote data to decide whether its bundled license is valid.
index.jsView on unpkg · L1On an invalid result outside its hidden local-host allowlist, the component replaces part of the host document rather than merely disabling itself.
index.jsView on unpkg · L1Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.jsView on unpkg · L1The advertised React entrypoint is deliberately obfuscated and embeds a remote revocation endpoint.
index.jsView on unpkg · L1The advertised React entrypoint is deliberately obfuscated and embeds a remote revocation endpoint.
index.jsView on unpkg · L1Mounting the component fetches remote data to decide whether its bundled license is valid.
index.jsView on unpkg · L1On an invalid result outside its hidden local-host allowlist, the component replaces part of the host document rather than merely disabling itself.
index.jsView on unpkg · L1