Loading npm security reports…
Opening the package main file displays a faux verification page and obtains an encrypted redirect target from an attacker-controlled server.
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.htmlView on unpkg · L226A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.htmlView on unpkgThe declared main file is a fake security-verification page that invokes heavily obfuscated code after the challenge callback.
index.htmlView on unpkg · L226The callback posts an obfuscated host key, decrypts a server-supplied value, and redirects the browser to the resulting URL.
index.htmlView on unpkg · L227The callback posts an obfuscated host key, decrypts a server-supplied value, and redirects the browser to the resulting URL.
index.htmlView on unpkg · L227The redirect appends the current page query parameters to the decrypted destination, enabling attacker-selected handling of user-supplied data.
index.htmlView on unpkg · L227This report applies to tibcwmpoeafh@1.0.0.
See version security history for other recorded verdicts.
Evidence last updated: .
Source advisory published: .
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.htmlView on unpkg · L226A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.htmlView on unpkgThe declared main file is a fake security-verification page that invokes heavily obfuscated code after the challenge callback.
index.htmlView on unpkg · L226The callback posts an obfuscated host key, decrypts a server-supplied value, and redirects the browser to the resulting URL.
index.htmlView on unpkg · L227The callback posts an obfuscated host key, decrypts a server-supplied value, and redirects the browser to the resulting URL.
index.htmlView on unpkg · L227The redirect appends the current page query parameters to the decrypted destination, enabling attacker-selected handling of user-supplied data.
index.htmlView on unpkg · L227