Hostile 100% javascript Download

system-user-identifier-cli 2.0.0

npm supply chain attack with CI/CD targetingBash reverse shell via /dev/tcp
SHA-2568b02bd641c856c510d26da46d003ac076dd754f8bab42143b676f9478ed5501e
URLhttps://registry.npmjs.org/system-user-identifier-cli/-/system-user-identifier-cli-2.0.0.tgz
MaleculeO₄(S₄CDy₂Er)H₂(OsPo₂)Md₂(InPa₄)

Also flagged by osv (MAL-2026-4679: Malicious code in system-user-identifier-cli (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.