Loading npm security reports…
Headless smart table engine for React — sorting, filtering, pagination, and row selection
npm installation automatically runs an obfuscated remote-code loader. The remote response is passed directly to eval, allowing the endpoint operator to execute arbitrary code on the installer machine.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgSource downloads or fetches remote code and executes it.
dist/index.d.js#virtual:base64:round1View on unpkg · L1Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.d.js#virtual:base64:round1View on unpkg · L1A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.d.js#virtual:base64:round1View on unpkg · L1Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/index.d.jsView on unpkg · L3Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L35Source downloads or fetches remote code and executes it.
dist/index.d.js#virtual:base64:round1View on unpkg · L1Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.d.js#virtual:base64:round1View on unpkg · L1A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.d.js#virtual:base64:round1View on unpkg · L1Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/index.d.jsView on unpkg · L3