Benign javascript Download

@darkrei08/setup-ai 3.5.2

“Cross-OS installer for an AI coding toolchain (pi, codex, antigravity, opencode, herdr, gentle-ai/gga, Engineering Excellence) with an inte…”

Detects a PowerShell Script that creates a Scheduled Task that runs from an suspicious directory
SHA-256587dec08ccb026db5878ac10499dfdd2fe2921bd68217f93a4afce222f8aae5e
URLhttps://registry.npmjs.org/@darkrei08/setup-ai/-/setup-ai-3.5.2.tgz
MaleculeTh

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.