Suspicious 80% javascript Download

twilio-voice-js-reference-components 1.0.1

Hollow package with empty metadata

Mature hollow package advertises default index entrynpm package has empty description
SHA-256bce3bf5278534d9002bda31df6fb98837c5395a59634c9ea706ebc41f0c5c33b
URLhttps://registry.npmjs.org/twilio-voice-js-reference-components/-/twilio-voice-js-reference-components-1.0.2.tgz
MaleculeO(S₂)Md(Pa₃)

Also flagged by osv (MAL-2026-6373: Malicious code in twilio-voice-js-reference-components (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.