Analyze your own packages withvet GitHub

mongodb@6.21.0

Suspicious
Analyzed at:11/12/2025, 6:25:03 PM
Source:https://registry.npmjs.org/mongodb/-/mongodb-6.21.0.tgz
SHA256:17da6af88e91f77478873c1e482590309aab2d84a85562a26cd55f9872b48e62
Confidence:Medium
Summary

This analysis was performed using vet and SafeDep Cloud Malicious Package Analysis. Integrate with GitHub using vet-action GitHub Action.

Multiple hardcoded proxy hostnames ('iLoveJavaScript') indicate malicious intent to redirect traffic and intercept data.

Details

The package contains multiple instances of hardcoded proxy hostnames ('iLoveJavaScript') in connect.js and state_machine.js. This is highly suspicious and suggests an attempt to redirect traffic through an attacker-controlled proxy server, potentially intercepting or modifying data. The multiple occurrences increase the confidence that this is not a benign error.