Hostile 100% javascript Download

cicy-desktop 2.1.203

Contains backdoor shell and exfiltration code

“CiCy - AI-powered operating system browser”

Source installs enabled LaunchAgentSupply-chain dropper via destructured child_process
SHA-25614032a83087ed7c3f8da2416429b5a128e182c2960ee6e3fc3a18f9e1308ed5b
URLhttps://r.cnpmjs.org/cicy-desktop/-/cicy-desktop-2.1.203.tgz
MaleculeO₁₂(C₅P₅Al₂CaDy₆Er₇Pr₄S₉As₂CoIXe₅)H₈(Cm₂₃F₁₅CrDb₆Os₁₂Po₁₄TiU₂)Md₅(BkInPa₆)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.