Hostile 100% javascript Download

xbox-one-webdriver-cli 1.0.0

postinstall exfiltrates host data

Install hook host-profile beacon to fixed hostSquat ships upstream manifest link and recon
SHA-25627ee6ed2f7adcb5db8ce6190e2b8da14f1dd96d0bb06ce90e3a268414a6e9fdd
URLhttps://registry.npmmirror.com/xbox-one-webdriver-cli/-/xbox-one-webdriver-cli-1.0.0.tgz
MaleculeO(S₆)H₄(Cm₄DbOs₄Po)Md₂(InPa₂)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.