Hostile 100% javascript Download

kwp-router 1.0.0

Registry metadata has empty author fieldDescription mentions placeholder package
SHA-2564869caf30f0e62b8dd2a73bb8860e044e928076d9bada98cfa10f5401fddecfb
URLhttps://registry.npmjs.org/kwp-router/-/kwp-router-1.0.0.tgz
MaleculeO(S₂)Md(Pa₃)

Also flagged by osv (MAL-2025-191970: Malicious code in kwp-router (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.