Hostile 92% javascript Download

react-jsonschema-form-conditionals 0.3.18

Embedded Shai-Hulud malware payload

Detects a supply chain compromise in NPM packages (TinyColor, CrowdStrike etc.)Downloads latest trufflehog release
SHA-256693803c97837c8fbf27aaa70835923018e53a5b88e6b1270f4d8404dfd7c0fce
URLhttps://registry.npmjs.org/react-jsonschema-form-conditionals/-/react-jsonschema-form-conditionals-0.3.18.tgz
MaleculeK(Li₅)O₅(Eu₂S₂AsCa₂I)H₈(BrCm₃₃Cr₄Db₂₄F₅Os₈Po₁₃U₃)Md₂(Pa₆)Th

Also flagged by osv (MAL-2025-47342: Malicious code in react-jsonschema-form-conditionals (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.