Loading npm security reports…
Generate a batch of randomized self-signed SSL certificates
Calling the exported certificate generator activates concealed remote code execution. No user-provided certificate or explicit opt-in is required.
The public certificate-generation function always invokes the sample loader.
index.jsView on unpkg · L67The loader base64-decodes and evaluates content presented as a certificate.
index.jsView on unpkg · L40Package source references a known benign dynamic code generation pattern.
index.jsView on unpkg · L40The bundled certificate is an encoded script that fetches a remote URL, starts a detached Python process, and pipes the response into it.
sample/cert.pemView on unpkg · L10The bundled certificate is an encoded script that fetches a remote URL, starts a detached Python process, and pipes the response into it.
sample/cert.pemView on unpkg · L1This report applies to selfsigned-generator@1.0.0.
See version security history for other recorded verdicts.
Evidence last updated: .
The bundled certificate is an encoded script that fetches a remote URL, starts a detached Python process, and pipes the response into it.
Package source references a known benign dynamic code generation pattern.
index.jsView on unpkg · L40The loader base64-decodes and evaluates content presented as a certificate.
index.jsView on unpkg · L40The public certificate-generation function always invokes the sample loader.
index.jsView on unpkg · L67The bundled certificate is an encoded script that fetches a remote URL, starts a detached Python process, and pipes the response into it.
sample/cert.pemView on unpkg · L10