Suspicious 85% javascript Download

ts-grok 0.0.8

Impersonates big.js with hidden loader

Impersonation of the popular big.js libraryLoader chain swallows promise results
SHA-25644c1ae87c7683b62436fb88c6a916b4893e88eb4059d35096cb2f29d8a751aac
URLhttps://registry.npmjs.org/ts-grok/-/ts-grok-0.0.8.tgz
MaleculeO(S₂)Md(Pa₃)

Also flagged by osv (MAL-2026-6321: Malicious code in ts-grok (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.