Hostile 100% javascript Download

system-user-identifier-cli 5.0.0

npm supply chain attack with CI/CD targetingBash reverse shell via /dev/tcp
SHA-2569786069375f5c6cdb1223fabe9cbf61ab7fa522eba8964c26338d7bd23feeda1
URLhttps://registry.npmjs.org/system-user-identifier-cli/-/system-user-identifier-cli-5.0.0.tgz
MaleculeO₄(S₄CDy₂Er)H₂(OsPo₂)Md₂(InPa₄)

Also flagged by osv (MAL-2026-4679: Malicious code in system-user-identifier-cli (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.