Hostile 92% javascript Download

agentskillmap 0.8.0

Embedded malicious binary dependency

“A capability differ for AI agent skills. Records what a skill makes your agent capable of doing, with byte-level evidence, and reports when…”

Package.json declares a files allowlistCalls spawnSync() to run a child process
SHA-2563bb088dc6a4fc4deaf4fd12e0ee5f96bfa1687542022386c16aff36bc97452d8

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.