Suspicious ^80% javascript Download

javac 1.0.0

Typosquatting name, minimal content

Release declares an entry point it omitsFilename is package.json

SHA-256e5702f5de95e3b966eab90eccd21d0ec94c2d8b28e07737fe104a50f02b495ca

URLhttps://registry.npmjs.org/javac/-/javac-1.0.0.tgz

Evidence

Package manifest has very short description lines 1–14

1{
"name": "javac",
"version": "1.0.0",
"description": "justjavac",
"main": "index.js",
"scripts": {
  "test": "test"
},
"keywords": [
  "justjavac"
],
"author": "cht8687",
"license": "MIT"
14}

No evidence locations were recorded for this file. Raw result