Hostile 92% javascript Download

@operato/input 9.0.39

Exfiltrates secrets to webhook.site

Detects a supply chain compromise in NPM packages (TinyColor, CrowdStrike etc.)Downloads latest trufflehog release
SHA-25628beb37e99b04418af941814bc3fcf39a8a7058b9ac1bb9417c64be82d9cba7d
URLhttps://registry.npmjs.org/@operato/input/-/input-9.0.39.tgz
MaleculeK(Li₄)O₅(Eu₂S₂AsCa₂I)H₈(Cm₃₂Cr₄Db₁₉F₅Hf₃Os₉Po₁₂U₇)Md₂(Pa₁₀)Th

Also flagged by osv (MAL-2025-47258: Malicious code in @operato/input (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.