Suspicious 80% javascript Download

@depup/postcss-image-set-function 8.0.1-depup.0

Typosquatting, impersonation, low downloads

“Display resolution-dependent images using the image-set() function in CSS (with updated dependencies)”

Renamed DepUp package retains upstream identity claimsDepup package name differs from original
SHA-256e1ec805922967f333c0418dc330d33dcab348e9ae052c607888d32758ae282e1
URLhttps://registry.npmjs.org/@depup/postcss-image-set-function/-/postcss-image-set-function-8.0.1-depup.0.tgz
MaleculeO(S₂)Md(Pa₆)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.