Loading npm security reports…
Headless smart table engine for React — sorting, filtering, pagination, and row selection
Installation triggers an obfuscated downloader that executes server-controlled JavaScript. The public runtime entrypoints appear unrelated table utilities.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgSource downloads or fetches remote code and executes it.
dist/index.d.js#virtual:base64:round1View on unpkg · L1Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.d.js#virtual:base64:round1View on unpkg · L1A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.d.js#virtual:base64:round1View on unpkg · L1Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/index.d.jsView on unpkg · L3Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L35Source downloads or fetches remote code and executes it.
dist/index.d.js#virtual:base64:round1View on unpkg · L1Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.d.js#virtual:base64:round1View on unpkg · L1A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.d.js#virtual:base64:round1View on unpkg · L1Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/index.d.jsView on unpkg · L3