Hostile 100% javascript Download

system-user-identifier-cli 7.0.1

npm supply chain attack with CI/CD targetingBash reverse shell via /dev/tcp
SHA-256556e8cb609195c773db1deea638696ae54f377eb0bf0b6ff4be9d8b40ca31ffa
MaleculeO₄(S₄CDy₂Er)H₂(OsPo₂)Md₂(InPa₄)

Also flagged by osv (MAL-2026-4679: Malicious code in system-user-identifier-cli (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.