Hostile 100% javascript Download

sn-flow-client 1.0.2

Exfiltrates system info via install hooks

postinstall exfiltrates command output to network endpointInstall script performs data exfiltration
SHA-2566e284996fe059d6f73aafbf7cab1cddc72a49e697f0d7204ff36c192abdeb416
URLhttps://registry.npmjs.org/sn-flow-client/-/sn-flow-client-1.0.2.tgz
MaleculeO₂(S₄Eu)Md(Pa₃)

Also flagged by osv (MAL-2024-9443: Malicious code in sn-flow-client (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.