Suspicious 85% arch Download

nanocurrency-node 22.1-1.src

Obfuscated malicious install script

pacman install scriptlet conceals its command with string obfuscationpacman package pairs a JS-runtime dependency with a foreign-bootstrap scriptlet
SHA-256720b4275223cf0e27e60fdae069eba53b1869d44e46b8c9f09975405e75763f9
URLhttps://aur.archlinux.org/cgit/aur.git/snapshot/nanocurrency-node.tar.gz
MaleculeO₃(AsSP₂)H₃(F₂Os₃Po₂)Md(Bk)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.