Hostile 100% javascript Download

importlib-metadata 10.1.1

Mature hollow package advertises default index entrynpm package has empty description
SHA-2561927265e07c699c65427cd41438b23725c9a9ab017b7fd97a1b56ce2a2ba5f69
URLhttps://registry.npmjs.org/importlib-metadata/-/importlib-metadata-10.1.1.tgz
MaleculeO(S₂)Md(Pa₃)

Also flagged by osv (MAL-2024-2506: Malicious code in importlib-metadata (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.