Hostile 92% javascript Download

exprrdd 5.2.2

Malicious preinstall script

“Fast, unopinionated, minimalist web framework”

Foreign repo claim with preinstall curl pipe to nodenpm preinstall executes replayed third-party code through Node stdin
SHA-256129503cb969a3d4c325660c1f925c44a810a235fca3c59fe989ad6e2aa4e4e5d

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.