Suspicious 85% go Download

github.com/gesellix/bose-soundtouch v0.115.1-0.20260627193345-258b9e747104

Hostile findings indicate data exfiltration

Anomalous package hides outbound data exfiltrationAnomalous package runs an obfuscated install hook
SHA-2569d654ef760d59d3e7d90f43583d7a90cf726b700d013dc998db2d5faf58071db
URLhttps://proxy.golang.org/github.com/gesellix/bose-soundtouch/@v/v0.115.1-0.20260627193345-258b9e747104.zip
MaleculeO₁₃(S₃AlAsC₆CaDy₄Er₃EuI₂LaP₃Pr₃Xe₂)H₇(Cm₂₆Cr₄Db₇F₁₂Os₁₅Po₁₁U₃)Md₃(Bk₂Pa)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.