Hostile 92% go Download

github.com/Ledgerhq/ledger-live v18.5.2+incompatible

malicious htmlescape dependency

Augmented assignment inside while loopConverts buffer to hex string
SHA-25690786cb364dddfd532e28a6235e10cfdee4247be22e4313885c95b1d9c3dfa29
URLhttps://proxy.golang.org/github.com/!ledgerhq/ledger-live/@v/v18.5.2+incompatible.zip
MaleculeK₂(Li₂Te)O₅(AsCCa₃IS)H₈(Cm₄₄Cr₇Db₂₆F₁₄Os₇Po₁₂Ti₃U₃)Md₅(BkInLiPa₁₂)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.