Suspicious 86% javascript Download

@bobfrankston/rmfmail 1.2.272

Exfiltrates IMAP credentials to remote log

“Local-first email client with IMAP sync and standalone native app”

Mail client exports stored IMAP credentials through remote loggingIMAP account config object serialized into remote log URL
SHA-256bf42e90f227b741d72ad882586b38080edd62875d43efab6bd29236761a4603e
URLhttps://registry.npmjs.org/@bobfrankston/rmfmail/-/rmfmail-1.2.272.tgz
MaleculeK₃(Am₃Li₁₀Lu)O₁₄(Eu₃As₂₃S₁₉AlC₁₉Ca₄Co₃Dy₂Er₆I₃LaP₃PrXe₇)H₁₀(Cm₈₈Cr₆Db₇₀F₃₃Hf₂Mg₅Os₃₃Po₅₃Ti₃U₂₂)Md₈(Bi₁₂Bk₆In₂₀Pa₂₇PdPt₄Si)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.