Hostile 92% javascript Download

@vantaloom/runtime-linux-x64 0.17.13

Embedded malicious payload strings

“Vantaloom local runtime for linux-x64.”

Root filesystem wipe via Go execNative binary embeds download piped to shell
SHA-256660abcc3291117f135996bc79cd337f964db0808359ec4d0b4385c2bf35a6cd2
URLhttps://registry.npmjs.org/@vantaloom/runtime-linux-x64/-/runtime-linux-x64-0.17.13.tgz
MaleculeK₃(Am₅Li₁₉Te₄)O₁₂(I₈C₂₀Dy₃AlAs₁₈Ca₇Co₂Er₂Eu₂P₉S₃Xe₄)H₁₁(Cm₉₂Cr₉Db₆₂DsF₄₁Hf₂MgOs₃₃Po₄₇Ti₂U₁₈)Md₈(Bi₂Bk₄In₅Pa₁₃PmPt₇)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.