bn-math 1.0.1
obfuscator and network dependencies
n8n package depends on javascript-obfuscatorMature hollow package advertises default index entry
SHA-256291e9d6261ee9db508efb9d3ba58c626b60b05c5fe0fe9da2ffd1cd1ddcf15a9
MaleculeO(S₂)Md(Pa₃)
Also flagged by osv (MAL-2026-6806: Malicious code in bn-math (npm)) +2 more.
Evidence
1{
2 "name": "bn-math",
3 "version": "1.0.1",
4 "description": "",
5 "license": "ISC",
6 "author": "",
7 "type": "commonjs",
8 "main": "index.js",
9 "scripts": {
10 "test": "echo \"Error: no test specified\" && exit 1"
11 },
12 "dependencies": {
13 "@babel/generator": "^7.29.1",
14 "@babel/parser": "^7.29.0",
15 "@babel/traverse": "^7.29.0",
16 "@babel/types": "^7.29.0",
17 "axios": "^1.13.5",
18 "child_process": "^1.0.2",
19 "https": "^1.0.0",
20 "javascript-obfuscator": "^5.3.0",
21 "os": "^0.1.2",
22 "path": "^0.12.7",
23 "prettier": "^3.8.1"
24 }
25}
No evidence locations were recorded for this file. Raw result