Benign javascript Download

tiny-dom-focus-trap 1.0.0

Wix registry facade conceals command-output exportnpm package ships Wix registry facade with import-time RCE exfil
SHA-2563a5d6063ac1d0267ca8e5dc162eb4cb09143e584e4d0d2a7382a118ee1db9d33
URLhttps://registry.npmmirror.com/tiny-dom-focus-trap/-/tiny-dom-focus-trap-1.0.0.tgz
MaleculeO(S₂)H₆(Cm₅Db₃F₂Os₅Po₄)Md₂(In₂Pa₄)

Also flagged by osv (MAL-2026-17526: Malicious code in tiny-dom-focus-trap (npm)) +3 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.