Suspicious 80% javascript Download

devez-vibe 1.9.38

postinstall hook, stealth scraping

“Stable terminal UI for Codex and Claude Agent SDK”

Skill tool installs packages via pip at runtimeBinary has a high-entropy 64 KiB region
SHA-256a0be746fba6cad370cc915e02e797caf869a9d1f8ab830bbc2312cc228fd0e2d
URLhttps://registry.npmjs.org/devez-vibe/-/devez-vibe-1.9.38.tgz
MaleculeK₃(Am₄Li₄Te₃)O₁₀(Xe₅Al₂As₈C₇Ca₃DyEr₄ILaS₅)H₉(Cm₄₉CrDb₃₆F₂₉MgOs₂₁Po₃₁Ti₃U)Md₆(Bi₇BkIn₃₉Pa₁₅Pt)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.