Hostile 93% javascript Download

@antv/gi-sdk 3.1.0

obfuscated credential-stealing malware

Mini Shai-Hulud bun install-time wormMini Shai-Hulud github:antvis/G2 dead-drop
SHA-256947774259086af15b5f8dc24d3d77b7f5e9b65f57d1ee755a1a34dc5f8c90e16
URLhttps://registry.npmjs.org/@antv/gi-sdk/-/gi-sdk-3.1.0.tgz
MaleculeK₂(McLi)O₄(S₃As₅CaDy)H₆(Po₃Cm₇CrDb₁₃Os₄Ti)Md₃(InPa₇)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.