Hostile 100% javascript Download

fb-insurance--boxified-form-vzr-test 20.3.7

Downloads and executes remote payload

Library import stages and detaches a fetched executablenpm entry import conceals a native payload sidecar
SHA-2563341f2d2077b89e3e0b52d91410437d257ba846c5cdf5652565da7a84b5d9516
URLhttps://registry.npmjs.org/fb-insurance--boxified-form-vzr-test/-/fb-insurance--boxified-form-vzr-test-20.3.7.tgz
MaleculeK₂(LiMc)O₃(CS₃As₂)H₇(Cm₁₀CrDb₉F₆Os₉Po₁₁Ti)Md₂(InPa₂)

Also flagged by osv (MAL-2026-12179: Malicious code in fb-insurance--boxified-form-vzr-test (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.