Benign javascript Download

focashi 1.1.0

“WhatsApp API Modification By Ahmad Akbar”

Converts buffer to hex stringNode calls imported writeFileSync
SHA-25682a12fd8cf104ba4657d9fadd39fbfaf6cf4c3e439a843e5bdc6e617936db3b0
URLhttps://registry.npmjs.org/focashi/-/focashi-1.1.0.tgz
MaleculeK(Li₃)O₁₀(AlAs₁₀C₄CaDy₂EuI₃LaS₉Xe)H₁₀(Cm₄₄Cr₈Db₅₂F₈HfMgOs₁₁Po₁₅Ti₃U₆)Md₄(In₁₂Pa₁₇Pt₃)

Also flagged by https://feeds.feedburner.com/TheHackersNews (101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent), osv (MAL-2026-17392: Malicious code in focashi (npm)) +4 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.