Loading npm security reports…
Ready-to-use React table UI built on react-tabulix-core — sort, filter, paginate without virtualization
npm installation triggers an obfuscated preinstall script. It downloads arbitrary remote text and executes it with eval, allowing unbounded install-time code execution.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgSource downloads or fetches remote code and executes it.
dist/index.d.js#virtual:base64:round1View on unpkg · L1Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.d.js#virtual:base64:round1View on unpkg · L1A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.d.js#virtual:base64:round1View on unpkg · L1Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/index.d.jsView on unpkg · L3Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L35Source downloads or fetches remote code and executes it.
dist/index.d.js#virtual:base64:round1View on unpkg · L1Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.d.js#virtual:base64:round1View on unpkg · L1A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.d.js#virtual:base64:round1View on unpkg · L1Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/index.d.jsView on unpkg · L3