Hostile 100% javascript Download

@tallyui/database 1.0.3

Obfuscated credential stealer and dropper

Kubernetes token pivots through cloud metadataMini Shai-Hulud setup.mjs preinstall Bun loader
SHA-256450a161ae7ec33d4123b9a829aaec10b3f016ea885d3746dcc39b18a89e26e23
URLhttps://registry.npmjs.org/@tallyui/database/-/database-1.0.3.tgz
MaleculeK₂(McLi)O₆(C₂Ca₃CoLaS₄As₄)H₇(Po₇Cm₂₃Cr₃Db₁₈F₁₂Os₇Ti)Md₃(InPa₇)Th

Also flagged by osv (MAL-2026-3518: Malicious code in @tallyui/database (npm)) +3 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.