theme-bundle.chunk.7.js@1.0.5

One or more suspicious static signals were detected.

Loading dist/theme-bundle.chunk.7.js in a browser page.

Denial of normal interaction with the affected web page.

Obfuscated DOM overlay and input suppression.

The minified bundle runs immediately in a browser context. It creates a high-priority overlay, locks document and body scrolling, disables body pointer events, intercepts keyboard events, and removes its own script element. The included readable source shows the same behavior. Although no theft or network activity was found, this is a deliberate page-interaction denial mechanism.

The package contains an obfuscated, immediately executing browser payload that prevents users from interacting normally with the host page. Its lack of an installation hook limits activation but does not make the injected behavior benign.