Hostile 100% javascript Download

joi-pack 1.0.5

Token harvester, exfiltrates secrets

Module-load posts harvested credentials to a direct-IP endpointReads developer credential stores and POSTs to a direct-IP HTTP endpoint
SHA-25696553af95ea2a4f7699e4384454129650ae868943eb46c6c3a67b2fcd7579ee4
URLhttps://registry.npmjs.org/joi-pack/-/joi-pack-1.0.5.tgz
MaleculeK₂(Am₂Li)O₅(Ca₃S₅CEuDy₂)H₆(Cm₆CrDb₅F₈Os₆Po₂)Md₂(InPa)

Also flagged by osv (MAL-2026-3765: Malicious code in joi-pack (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.