Suspicious 80% javascript Download

@wowok/skills 3.2.7

postinstall modifies AI agent configs

“WoWok AI Skills for Claude Code, Codex, Gemini CLI, Qwen Code, Grok Build, OpenCode, Google Antigravity, Cursor, Devin Desktop (formerly Wi…”

PowerShell EncodedCommand invocationDeclares an npm postinstall lifecycle hook
SHA-256a5ab914303f58fc2585c2249df19d973d7ccf8c1b072fef11a2719ef4efa8c39
URLhttps://registry.npmjs.org/@wowok/skills/-/skills-3.2.7.tgz
MaleculeK₃(AmLi₂Te)O₄(C₃CaS₆Xe₃)H₇(Po₁₁Cm₂Cr₂Db₁₆F₁₉Os₇U)Md₄(BkIn₅Pa₉)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.