Hostile 100% javascript Download

ts-predict-helper 3.7.1

Trojanized dependency with hidden loader

Impersonation of the popular big.js libraryImport-time from_str loader swallows results
SHA-25621287491149a56e373ef048ec820fee1df892f03c417d84a473b1569fe06a594
URLhttps://registry.npmjs.org/ts-predict-helper/-/ts-predict-helper-3.7.1.tgz
MaleculeO(S₄)H₂(CmOs)Md(Pa₄)

Also flagged by osv (MAL-2026-6322: Malicious code in ts-predict-helper (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.