Hostile 100% javascript Download

react-native-google-maps-directions 2.1.2

JavaScript writes credential workflow wormGitHub Actions secret name recon
SHA-256770e49ac32f04cbeb23979df16c6f93194bd5880ac405431db97d65bba7ea0e9
URLhttps://registry.npmjs.org/react-native-google-maps-directions/-/react-native-google-maps-directions-2.1.2.tgz
MaleculeO₁₁(As₉S₁₀C₂Ca₃CoEuILaDy₄PXe₄)H₅(Os₃Po₈Cm₆Db₅F)Md₂(Pa₃In)

Also flagged by osv (MAL-2025-190999: Malicious code in react-native-google-maps-directions (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.