Hostile 100% javascript Download

js-logger-pack 1.1.13

SSH key injection, data exfiltration

TraderTraitor /api/validate/ exfiltration clustervalidate project env endpoint
SHA-2565f67c78760b574454fbb65eb74f4e39ac62cfba1e6cc51289ba6aa804f7dcde5
URLhttps://registry.npmjs.org/js-logger-pack/-/js-logger-pack-1.1.13.tgz
MaleculeK₂(McLi)O₅(EuAs₂CoDy₃S₂)H₆(Cm₈Db₁₃F₉Os₅Po₆U)Md₃(InPa₇)

Also flagged by osv (MAL-2026-2827: Malicious code in js-logger-pack (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.