Hostile 92% javascript Download

@bitwardne/jslib 1.1.0

preinstall curl pipe node

“A module that loads some modules that are useful in javascript”

Foreign repo claim with preinstall curl pipe to nodenpm preinstall pipes curl or wget into node
SHA-2567b5f30bfcfec106a157508871ebf55b9383309e12be539a7082eb45ea66f16c4
URLhttps://repo.huaweicloud.com/repository/npm/@bitwardne/jslib/-/jslib-1.1.0.tgz
MaleculeO(S₂)H₃(Cm₄OsPo)Md₂(Pa₈)

Also flagged by osv (MAL-2026-17694: Malicious code in @bitwardne/jslib (npm)) +3 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.