npm · registry.npmjs.org

nottuff12

Large Javascript Payload: 5400022 bytes

Why PkgRadar flagged 1.7.7

Severity	Signal	Evidence
medium	Large Javascript Payload	5400022 bytes · package/assets/73sxysj46r.js
medium	Large Javascript Payload	5965363 bytes · package/assets/mh5v4t7fxj.js
medium	Large Javascript Payload	6234818 bytes · package/assets/xbal01i589.js
medium	Large Javascript Payload	2110853 bytes · package/j3ve9/ls3ez.mjs

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.7.7`	Review	40	2026-05-27
`1.1.7`	Low risk	0	2026-05-27

Block this in CI

PkgRadar gates nottuff12 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]