2025-03-27-@sporta-technology_d11-web-components.icon-element v0.0.9999

preinstall exfiltrates system info

npm preinstall sends callback to an IP addressInstall script performs data exfiltration
SHA-2560a2230c643f67fce8e02ba8dee468d3796b2b57aa7ce3c8f993ce682e63d7648

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.