Hostile 100% javascript Download

@antv/gi-mock-data 1.1.5

Obfuscated credential stealer with install hook

Mini Shai-Hulud bun install-time wormMini Shai-Hulud github:antvis/G2 dead-drop
SHA-2562fc81f608b96283821e07a8ba6605b591bf2df75537cca42e423c7f5864373cf
URLhttps://registry.npmjs.org/@antv/gi-mock-data/-/gi-mock-data-1.1.5.tgz
MaleculeK₂(McLi)O₄(S₃As₅CaDy)H₆(Po₂Cm₇CrDb₁₃Os₃Ti)Md₃(InPa₆)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.