Hostile 100% javascript Download

next-styled-nprogress 1.0.4

JavaScript writes credential workflow wormGitHub Actions secret name recon
SHA-256bc4a4092fc97a93098154ed951eeb183476d3c5f0211131bab3ab4e9b11400f5
URLhttps://registry.npmjs.org/next-styled-nprogress/-/next-styled-nprogress-1.0.4.tgz
MaleculeO₁₁(As₉S₁₀C₂Ca₃CoEuILaDy₄PXe₄)H₅(Os₃Po₈Cm₆Db₅F)Md₂(Pa₃In)

Also flagged by osv (MAL-2025-190981: Malicious code in next-styled-nprogress (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.