Note: This report is updated by a verification record
The package is malicious due to HTML injection in index.js redirecting to adult/malicious sites and a YARA match on a suspicious URL.
The package is marked as malware by OSV: MAL-2025-5831 with source: OSV
Note: This report is updated by a verification record
The package is a malware because the index.js file injects HTML into the document body that contains links to adult content websites and potentially malicious sites. The injected HTML redirects users to external sites without their explicit consent. The YARA rule exotic_tld also matched a suspicious URL in the index.js file.
