Benign javascript Download

@opencode-ai/cli-linux-x64-baseline-musl

Anomalous package hides outbound data exfiltrationAnomalous package runs an obfuscated install hook
SHA-2566d48e368d16da930878b2b71807c2ea8a67b7f0ea1a5384bb12f22a9198cc6c9
URLhttps://registry.npmjs.org/@opencode-ai/cli-linux-x64-baseline-musl/-/cli-linux-x64-baseline-musl-1.17.13.tgz
MaleculeK(Li)O₁₀(SAlAsC₂CaEr₄EuI₂LaPr)H₉(Cm₁₈Cr₅Db₃Ds₂F₁₁MgOs₆Po₇U₂)Md₄(Bi₃Pa₄)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.