Package Under Review
This package is under review. Identity is withheld until findings are confirmed. This is an automated assessment and findings are risk indicators, not confirmed threats.
5 threats detected
Downloads: <1K
pkg-bGVnYWN5d2Vi...
npmwarnings detectedSecurity Scan Results
Warnings detected due to potential concerns
CVEs
0
Threats
5
Install Scripts
0
Confirmed Threats (5)
Cross-Site Scripting (XSS)
confidence: 85%confirmed
Location: templates/leftpane.ejs:29
<a href="<%- link.url %>"><%= link.text %></a>Cross-Site Scripting (XSS)
confidence: 85%confirmed
Location: templates/ribbon.ejs:3
background="<%- body.bgImage %>"Cross-Site Scripting (XSS)
confidence: 85%confirmed
Location: templates/leftpane.ejs:3
background="<%- body.bgImage %>"brin Recommendations
- →This package has warnings detected. Evaluate the specific concerns before proceeding.
- →5 verified threat patterns detected. Review the specific findings and consider alternatives.
This is an automated, point-in-time assessment and may contain errors. Findings are risk indicators, not confirmed threats. Security posture may change over time. Maintainers can dispute findings via the brin review process.
Identity withheld
Pending verification process
Download Range
<1K
Last Scanned
2 days ago
Trust Score
55/100·Legitimacy signals, not safety
Capabilities
Filesystem
Reads files
Environment
Accesses: EXPRESS_PORT