Hostile 100% javascript Download

clobprice.api 2.73.1

Downloads native payload and installs persistenceDefender-named payload downloaded and launched
SHA-2564fd66b0c3349371d989e46183baa0178ecdfcdd260f8130267c4e0a91b00aa83
URLhttps://registry.npmjs.org/clobprice.api/-/clobprice.api-2.73.1.tgz
MaleculeK(Am)O₈(C₈Er₅S₈Al₄As₃Dy₃P₃Xe₃)H₈(Cm₁₁Cr₂Db₂DsF₉Os₄Po₅Ti)Md₂(InPa₄)

Also flagged by osv (MAL-2026-4350: Malicious code in clobprice.api (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.