Loading npm security reports…
Headless smart table engine for React — sorting, filtering, pagination, and row selection
Installation invokes a concealed lifecycle payload intended to download and execute arbitrary remote JavaScript. The public library entrypoints are otherwise a React table utility.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgSource downloads or fetches remote code and executes it.
dist/index.d.js#virtual:base64:round1View on unpkg · L1Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.d.js#virtual:base64:round1View on unpkg · L1Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/index.d.jsView on unpkg · L3Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L35Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L35Source downloads or fetches remote code and executes it.
dist/index.d.js#virtual:base64:round1View on unpkg · L1Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.d.js#virtual:base64:round1View on unpkg · L1Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/index.d.jsView on unpkg · L3