Is sloth-d2c-figma-plugin safe to install?

sloth-d2c-figma-plugin was flagged as CRITICAL RISK (risk score 23471.5) with 1567 findings detected across 11 files. Review the findings before installing.

What security issues were found in sloth-d2c-figma-plugin?

Sigil detected 1567 findings in sloth-d2c-figma-plugin, including patterns related to obfuscation, network_exfil, credentials. See the full scan report for details.

Scans/npm/sloth-d2c-figma-plugin

sloth-d2c-figma-plugin

npm

Summary

sloth-d2c-figma-plugin v2.0.3-beta139 was classified as CRITICAL RISK with a risk score of 23471.5. Sigil detected 1567 findings across 11 files, covering phases including obfuscation, network exfiltration, credential access. Review the findings below before installing this package.

CRITICAL RISK(23471.5)

v2.0.3-beta139

20 March 2026, 08:32 UTC

by Sigil Bot

Risk Score

23471.5

Findings

1567

Files Scanned

Provenance

Registry

https://www.npmjs.com/package/sloth-d2c-figma-plugin/v/2.0.3-beta139

Scanned From

https://registry.npmjs.org/sloth-d2c-figma-plugin/-/sloth-d2c-figma-plugin-2.0.3-beta139.tgz

Findings by Phase

•

Phase Ordering

Phases are ordered by criticality, with the most dangerous at the top. Click any phase header to expand or collapse its findings. Critical phases are expanded by default.

Badge

Markdown

[![Sigil Scan](https://sigilsec.ai/badge/npm/sloth-d2c-figma-plugin)](https://sigilsec.ai/scans/2269D613-843C-4601-B981-F9F6DEB1A917)

HTML

<a href="https://sigilsec.ai/scans/2269D613-843C-4601-B981-F9F6DEB1A917"><img src="https://sigilsec.ai/badge/npm/sloth-d2c-figma-plugin" alt="Sigil Scan"></a>

Run This Scan Yourself