Suspicious 54% javascript Download

@bobfrankston/rmfmail 1.2.349

Exfiltrates IMAP credentials to remote log

“Local-first email client with IMAP sync and standalone native app”

Mail client exports stored IMAP credentials through remote loggingIMAP account config object serialized into remote log URL
SHA-25600cc87f6190f7a5d01eca04dda25008b6b92d2868a6b70efd87c205c41dae299
URLhttps://registry.npmjs.org/@bobfrankston/rmfmail/-/rmfmail-1.2.349.tgz
MaleculeK₄(Am₂Li₁₀LuTe)O₁₄(Er₇Eu₃As₂₅S₂₀AlC₂₀Ca₃Co₃Dy₂I₃LaP₃PrXe₇)H₁₀(Cm₈₇Cr₆Db₇₂F₃₂Hf₂Mg₅Os₃₃Po₅₃Ti₃U₂₃)Md₈(Bi₁₂Bk₆In₂₀Pa₂₆PdPt₄Si)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.