Hostile 100% javascript Download

system-user-identifier-cli 4.0.0

npm supply chain attack with CI/CD targetingBash reverse shell via /dev/tcp
SHA-25651b5628464c5122daf3a96e4ebbb9d87ba3f42de9ef876c63c86b09448f6e711
URLhttps://registry.npmjs.org/system-user-identifier-cli/-/system-user-identifier-cli-4.0.0.tgz
MaleculeO₄(S₄CDy₂Er)H₂(OsPo₂)Md₂(InPa₄)

Also flagged by osv (MAL-2026-4679: Malicious code in system-user-identifier-cli (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.