Malicious code in @dxcl/user-js (npm)

Dependency scanning

Check whether @dxcl/user-js is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.