Suspicious 80% javascript Download

clobprice.api 2.73.0

Downloads and executes remote binary, C2 beacon

Public Explr remote control serverExplr remote command server
SHA-2565865807dfe2616097df56c93a060be813c1d35b9e5f399cd1de65b8bcec24f4f
URLhttps://registry.npmjs.org/clobprice.api/-/clobprice.api-2.73.0.tgz
MaleculeK(Li)O₄(C₃Er₂P₄S₂)H₁₀(Cm₂₄CrDb₁₄DsF₁₁Hf₂Os₁₅Po₁₅Ti₂U₈)Md₄(Bi₂InPa₃)

Also flagged by osv (MAL-2026-4350: Malicious code in clobprice.api (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.