Hostile 92% javascript Download

@wololasod/tiny-id 0.1.3

Obfuscated dropper, C2, persistence

Obfuscated Node stage silently respawns its current moduleEncrypted strings drive computed script calls
SHA-2564acbfd6d9aa3d51a0cde83513582c7f3e2e3956aeecf005653b79c6f4f71f6ec
URLhttps://r.cnpmjs.org/@wololasod/tiny-id/-/tiny-id-0.1.3.tgz
MaleculeO₅(ErAs₆C₅PS)H₆(Cm₅Cr₂Db₁₇FOsPo₇)Md₃(InPa₇)

Also flagged by osv (MAL-2026-12331: Malicious code in @wololasod/tiny-id (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.