Hostile 92% javascript Download

boardflow 1.2.1

Obfuscated install script downloads and executes payload

npm preinstall hook executes an obfuscator.io-obfuscated payloadNode calls imported writeFileSync
SHA-25689f95032a68ff6b23785d1694d16a658da1c977ad807fdc437e6be2a59c7d6a2
URLhttps://registry.npmjs.org/boardflow/-/boardflow-1.2.1.tgz
MaleculeO₂(S₂As)H₄(DbF₄Os₂Po₃)Md(Pa₂)

Also flagged by osv (MAL-2026-5799: Malicious code in boardflow (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.