Malicious code in @dxcl/fund-js (npm)

Dependency scanning

Check whether @dxcl/fund-js is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.