Hostile 92% go Download

github.com/exponentjs/exponent v0.0.0-20260818174014-5a8d9956303c

Android accessibility overlay keylog permissions

NPM install hook exfiltrates filtered environment valuesPackage decoder uses fetch to send caller input to a raw-IP endpoint
SHA-25646421dbfcdd30b9076c1a17229a8296e61bed350a61a146f68cf04b7cf9faa49
URLhttps://proxy.golang.org/github.com/exponentjs/exponent/@v/v0.0.0-20260818174014-5a8d9956303c.zip
MaleculeK₄(Am₅Li₅Te₃)O₁₂(Co₅IP₃S₁₁As₅C₅Ca₃Er₃DyEu₂La₂Xe₃)H₁₁(Os₃₄Cm₁₀₂Cr₁₀Db₅₁Ds₂F₄₁Hf₁₀Po₅₈Ti₅U₁₇)Md₁₁(ArBi₂Bk₂InLi₇Pa₂₃Pt₂)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.