Hostile 92% python 416,445 installs Download

code-server 4.133.0

obfuscated self-cleaning install hook

“Run VS Code on a remote server.”

VS Code startup extension POSTs a persistent host profilenpm postinstall executes an obfuscated self-cleaning loader
SHA-256a3b19c61614da20ac4c795ee4132e4e9bb099b8aecbbdae8a48d9923f9c64ac6
URLhttps://conda.anaconda.org/conda-forge/linux-64/code-server-4.133.0-h65c4c7d_0.conda
MaleculeK₄(Am₆Li₂₁Mc₃Te₂)O₁₀(C₅S₉AlAs₂Ca₂Co₂Dy₂Er₅LaP₂)H₁₂(Cm₁₂₀Cr₂₂Db₅₈Ds₃F₅₆Hf₅Mg₃Os₆₁Po₇₅Ti₂U₁₅)Md₁₁(Bi₉Bk₅InLi₉Pa₂₅Pt₂Si₂)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.