Hostile 92% php 476 installs Download

yrodevgit/ctrx v5.5.4

Embedded Russian regional malware payload

“A lightweight, powerful, and JSON-first PHP framework built for modern web application development. Designed around simplicity, performance…”

SweetAlert2 region-gated sabotage releaseRegion-gated browser input suppression with looping audio
SHA-2569a7b801b209547a6c4bcc8861937df65f1d6ecdb541def943561de0612acdb7c
URLhttps://api.github.com/repos/YroDevGit/ctrx/zipball/152ed352b57f8c68e1140bd862bfa4c13ec9a0a9
MaleculeK₃(McLi₅Te)O₃(IAsXe)H₉(Cm₄₅Cr₈Db₂₃F₁₃Hf₄Os₁₂Po₇TiU₁₀)Md₃(BkPa₃)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.