Hostile 92% javascript Download

tt-help-cli-ycl 1.4.75

TikTok scraper with C2 and evasion

Batch launcher sets hardcoded external IP C2 endpoint variableExecutes shell commands synchronously
SHA-256232bac923b88faba9527f3a2c6a7fef3c507f17fa40eb2f5f74d76c6ffa32741
URLhttps://registry.npmjs.org/tt-help-cli-ycl/-/tt-help-cli-ycl-1.4.75.tgz
MaleculeK(Li)O₅(S₂C₂CaDy₄Er)H₈(Cm₃₈Db₁₈F₉Hf₂Os₁₆Po₂₃Ti₄U₁₃)Md₄(InLiPa₆)

Also flagged by osv (MAL-2026-12488: Malicious code in tt-help-cli-ycl (npm)).

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.