Loading npm security reports…
A new date formatting utilit1
Installing the package runs a reverse shell that connects to a hard-coded external IP. A separate bundled script also implements host fingerprint collection and exfiltration.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgSource collects local host identity data and sends it to an external endpoint.
postinstall.jsView on unpkg · L3Source matches reverse-shell style process and socket wiring.
package.json#scripts.postinstallView on unpkg · L1Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgSource collects local host identity data and sends it to an external endpoint.
postinstall.jsView on unpkg · L3Source matches reverse-shell style process and socket wiring.
package.json#scripts.postinstallView on unpkg · L1