react-hook-doms@5.3.1

Analysis

Combosquat of react-dom. The package's main entry point (index.js) fetches a remote payload from svganchordev[.]net/icons/108 and executes it via the Function constructor with full Node.js capabilities (require, process, Buffer) passed into the execution context. Any project importing this package will download and run arbitrary code from the remote server. The package ships no actual React hooks — only the remote code execution downloader.