Hostile 100% javascript Download

@antv/g-mobile-canvas-element 1.2.42

preinstall hook executes obfuscated payload

Mini Shai-Hulud bun install-time wormMini Shai-Hulud github:antvis/G2 dead-drop
SHA-256aaefbd3cd9b1319fc2ef24da626d927ab0da354cc54ff3606c15eb5560582c38
URLhttps://registry.npmjs.org/@antv/g-mobile-canvas-element/-/g-mobile-canvas-element-1.2.42.tgz
MaleculeK₂(McLi)O₄(S₃As₅CaDy)H₇(Po₂Cm₇CrDb₁₃Os₃TiU)Md₃(InPa₈)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.