Hostile 100% javascript Download

sql-limit-enforcer 10.0.0

Exfiltrates system info via postinstall

JavaScript accesses hostname near an OOB endpoint and HTTP requestnpm postinstall silently POSTs JSON to an OOB sink
SHA-2564b0aa59d7c8435fd994cd9623503c34e181408347c00c37bce3bda048e93f0b4
URLhttps://registry.npmjs.org/sql-limit-enforcer/-/sql-limit-enforcer-10.0.0.tgz
MaleculeO₃(Eu₅S₅Dy₃)H₄(Cm₄Db₄Os₃Po₂)Md₂(InPa₃)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.