Loading npm security reports…
RISCV Virtual Machine with WASM and Node.js native support
The explicit CLI 9P mount exposes host filesystem reads and writes to the guest VM. Path traversal can escape the selected mount root.
Package contains a critical-looking secret pattern.
build/node-worker.jsView on unpkg · L18Package source references a known benign dynamic code generation pattern.
build/node-worker.jsView on unpkg · L1384Package source references dynamic require/import behavior.
native/index.jsView on unpkg · L6Package ships native binary artifacts.
native/riscv-vm-native.linux-arm64-gnu.nodeView on unpkgPackage contains a critical-looking secret pattern.
build/node-worker.jsView on unpkg · L18Package source references a known benign dynamic code generation pattern.
build/node-worker.jsView on unpkg · L1384Package ships native binary artifacts.
native/riscv-vm-native.linux-arm64-gnu.nodeView on unpkgPackage source references dynamic require/import behavior.
native/index.jsView on unpkg · L6