PkgRadar

npm · registry.npmjs.org

multer-orm

Js Obfuscator Packer

Early detection

PkgRadar flagged this 5.6 days before public disclosure

Detected 2026-07-04 · disclosed as MAL-2026-10064 on 2026-07-09

Why PkgRadar flagged 2.0.4

SeveritySignalEvidence
highJs Obfuscator Packer

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
2.0.4High risk452026-07-11
2.0.3High risk452026-07-10
2.0.7Review312026-07-09
2.0.6Review452026-07-08
2.0.5Review452026-07-04
1.0.0Low risk02026-06-30
2.0.2Low risk02026-06-30
2.0.1Low risk02026-06-30

Block this in CI

PkgRadar gates multer-orm (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
multer-orm — npm malware advisory | PkgRadar