Hostile 100% javascript Download

rwc-client 0.29.11

preinstall downloads and executes Bun

Obfuscated JavaScript targets AWS and GitHub runner credentialspreinstall setup.mjs bootstraps Bun runtime
SHA-256bf5ee70bdd4fed033be436acd511082c4de8a4daa772c16bda6ac293fca65df9
URLhttps://registry.npmjs.org/rwc-client/-/rwc-client-0.29.11.tgz
MaleculeK(Li₆)O₆(AlCCa₂S₅As₄Xe)H₁₀(Db₄₂BrCm₄₁Cr₅F₈Hf₆Os₁₀Po₈Ti₂U₁₂)Md₇(BkInLiPa₇Pt)

Also flagged by osv (MAL-2026-11985: Malicious code in rwc-client (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.