Hostile 92% javascript Download

acidtest 2.0.1

Embedded credential exfiltration payloads

“Security scanner for MCP servers and AI agent skills. Scan before you install.”

npm package steals CI/CD tokensnpm package CI/CD token exfiltration
SHA-256b2b389c8e07918ee46b8a0821ec577e23a071badb76cec4deab5f1076b2bd90b

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.