Hostile 100% javascript Download

web-dotenv 1.0.2

Axios Base64 URL payload eval loaderBase64 decode + eval in same file
SHA-2566401b9400fe94cc944d266fb39f1414e6e41a4c48317bd7a13d38df889f24ec6
URLhttps://registry.npmjs.org/web-dotenv/-/web-dotenv-1.0.2.tgz
MaleculeO₄(As₂C₂S₂Ca)H₅(Cm₃CrPo₂Db₃F₂)Md(Pa₆)

Also flagged by osv (MAL-2026-4728: Malicious code in web-dotenv (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.