Hostile 100% javascript Download

system-user-identifier-cli 7.0.0

npm supply chain attack with CI/CD targetingBash reverse shell via /dev/tcp
SHA-2565490c12e08a20a22a02342a9b1dc04ccf40cee32fdde1499dacba91ce4cceabc
URLhttps://registry.npmjs.org/system-user-identifier-cli/-/system-user-identifier-cli-7.0.0.tgz
MaleculeO₄(S₄CDy₂Er)H₂(OsPo₂)Md₂(InPa₄)

Also flagged by osv (MAL-2026-4679: Malicious code in system-user-identifier-cli (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.