Hostile 92% javascript Download

@operato/utils 9.0.40

Exfiltrates secrets to webhook.site

Detects a supply chain compromise in NPM packages (TinyColor, CrowdStrike etc.)Downloads latest trufflehog release
SHA-256093907be2c4dbfbf439c6cc498a26229bf8accfd46747e2a3a5be870248b5586
URLhttps://registry.npmjs.org/@operato/utils/-/utils-9.0.40.tgz
MaleculeK(Li₄)O₅(Eu₂S₂AsCa₂I)H₉(Cm₃₂Cr₄Db₂₅F₅Hf₂Os₁₁Po₁₂TiU₄)Md₂(Pa₇)Th

Also flagged by osv (MAL-2025-47263: Malicious code in @operato/utils (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.