Loading npm security reports…
The package entrypoint is a browser page that disguises its behavior behind a challenge interface and obfuscated script. It decrypts configuration and redirects the visitor to an undisclosed destination.
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.htmlView on unpkg · L182A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.htmlView on unpkgThe entry page contains heavily obfuscated code that decodes encrypted data and imports a Web Crypto key.
index.htmlThis report applies to yangmingcom@1.0.1.
See version security history for other recorded verdicts.
Evidence last updated: .
The page schedules a redirect to a concealed host after presenting a challenge interface.
index.htmlView on unpkg · L183The manifest exposes index.html as the package entrypoint.
package.jsonView on unpkg · L2Source contains an obfuscated payload loader that reconstructs and executes hidden code.
index.htmlView on unpkg · L182The entry page contains heavily obfuscated code that decodes encrypted data and imports a Web Crypto key.
index.htmlView on unpkg · L183The page schedules a redirect to a concealed host after presenting a challenge interface.
index.htmlView on unpkg · L183A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
index.htmlView on unpkgThe manifest exposes index.html as the package entrypoint.
package.jsonView on unpkg · L2