Loading npm security reports…
A tool for docx2pdf.
Installation downloads an opaque Windows executable from a mutable remote branch. A conversion call executes that downloaded file.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgPackage ships non-JavaScript build or shell helper files.
srcPython/test.batView on unpkgPackage ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.
test/ztmp.docxView on unpkgPackage hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
test/ztmpTrue.pdfView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/w-docx2pdf.umd.js#virtual:normalized:round1View on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/w-docx2pdf.umd.jsView on unpkgThis report applies to w-docx2pdf@1.0.22.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L12Package ships non-JavaScript build or shell helper files.
srcPython/test.batView on unpkgPackage ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.
test/ztmp.docxView on unpkgPackage hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
test/ztmpTrue.pdfView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/w-docx2pdf.umd.js#virtual:normalized:round1View on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/w-docx2pdf.umd.jsView on unpkg