0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
fhj8cv9dkwm4
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting fhj8cv9dkwm4, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-13809 | Unknown | Malicious code in fhj8cv9dkwm4 (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (f91ea4120fcb82c9a36d533346c28a2ce7ed225ed31a89526d9cee45f0be2581) Package ships a single index.html that mimics a Cloudflare Turnstile 'Just a moment...' verification page. An obfuscated (obfuscator.io-style) script assembles a `.club` URL at runtime from string-array lookups, copies the current page's query parameters onto it, and navigates the browser to that URL via `window.location`. The package declares no JS main, no bin entry, and no lifecycle scripts (`preinstall`/`install`/`postinstall`/`prepare` |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (f91ea4120fcb82c9a36d533346c28a2ce7ed225ed31a89526d9cee45f0be2581) Package ships a single index.html that mimics a Cloudflare Turnstile 'Just a moment...' verification page. An obfuscated (obfuscator.io-style) script assembles a `.club` URL at runtime from string-array lookups, copies the current page's query parameters onto it, and navigates the browser to that URL via `window.location`. The package declares no JS main, no bin entry, and no lifecycle scripts (`preinstall`/`install`/`postinstall`/`prepare`