Hostile 100% javascript Download

@servicetitan/microfront-utils 1.4.4

Obfuscated payload, preinstall runtime download

Obfuscated JavaScript targets AWS and GitHub runner credentialsTemp Bun runtime launches opaque payload
SHA-25616b89fe3d00a9a60da91f2fccf12e53a0893cb0269cefade158f4ca52b435d4e
URLhttps://registry.npmjs.org/@servicetitan/microfront-utils/-/microfront-utils-1.4.4.tgz
MaleculeO₅(CCaS₄As₂Xe)H₅(Cm₁₅Db₉F₇OsPo₆)Md₂(InPa₅)

Also flagged by osv (MAL-2026-11904: Malicious code in @servicetitan/microfront-utils (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.