Hostile 93% php 39,929 installs Download

bfunky/http-parser 2.2.5

Exfiltrates environment variables to remote IP

“A library to parse HTTP headers and HTTP header fields”

Encoded URL has IP and .phpSends host name to a hardcoded IP

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.