Hostile 100% javascript Download

@antv/color-schema 0.4.3

preinstall hook executes obfuscated payload

Mini Shai-Hulud bun install-time wormMini Shai-Hulud github:antvis/G2 dead-drop
SHA-2566154c81bc18d9452e024fbd8a8a49d2813780e3c3395085de5b084a6f62668e6
URLhttps://registry.npmjs.org/@antv/color-schema/-/color-schema-0.4.3.tgz
MaleculeK₂(McLi)O₄(S₃As₅CaDy)H₆(Po₂Cm₇CrDb₁₃Os₃Ti)Md₃(InPa₁₁)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.