Hostile 92% javascript Download

rxnt-kue 1.0.5

Exfiltrates secrets to webhook.site

Detects a supply chain compromise in NPM packages (TinyColor, CrowdStrike etc.)Downloads latest trufflehog release
SHA-25698cccb0e34488a9135e59fc1e24867e1a5d12c001e10148dc302febe580cdef5
URLhttps://registry.npmjs.org/rxnt-kue/-/rxnt-kue-1.0.5.tgz
MaleculeK(Li₅)O₅(Eu₂S₃AsCa₂I)H₈(Cm₃₇Cr₄Db₂₄F₅HfOs₁₀Po₁₅U₅)Md₂(Pa₃)Th

Also flagged by osv (MAL-2025-47347: Malicious code in rxnt-kue (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.