Hostile 100% javascript Download

db-query-log 1.0.2

Fetches and executes remote payload

“A database connector class that simplifies connections and queries to a database for nodejs apps”

JsonKeeper payload compiled as Node modulenpm package compiles JsonKeeper payload
SHA-256395113e4341f54cdad52749b4a61cb6fe4dd8e69b62ef71bab7d1bb98269088c
URLhttps://registry.npmmirror.com/db-query-log/-/db-query-log-1.0.2.tgz
MaleculeO₂(CS₂)H₃(Cm₃DbPo)Md(Pa₂)

Also flagged by osv (MAL-2026-6539: Malicious code in db-query-log (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.