Loading npm security reports…
A fast, validated, zero-dependency environment configuration toolkit for Node.js
The package executes a concealed Windows PowerShell payload when its library is imported or its command-line program starts. No network destination is visible in the inspected launcher.
Package source references dynamic require/import behavior.
dist/decode.jsView on unpkg · L1A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/cli.cjs#virtual:normalized:round1View on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/cli.cjsView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/index.cjsView on unpkgThe import entrypoint reads data from an adjacent image and passes it as an encoded PowerShell command.
dist/index.cjsView on unpkg · L1The package exposes the affected CommonJS module and command-line entrypoint.
package.jsonView on unpkg · L5This report applies to stestenv@1.0.1.
See version security history for other recorded verdicts.
Evidence last updated: .
Source advisory published: .
Package source references dynamic require/import behavior.
dist/decode.jsView on unpkg · L1A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/cli.cjs#virtual:normalized:round1View on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/cli.cjsView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/index.cjsView on unpkgThe import entrypoint reads data from an adjacent image and passes it as an encoded PowerShell command.
dist/index.cjsView on unpkg · L1The package exposes the affected CommonJS module and command-line entrypoint.
package.jsonView on unpkg · L5