Suspicious 85% javascript Download

@kenkaiiii/gg-editor 0.7.44

Hostile findings indicate data exfiltration

“CLI video editor agent. Drives DaVinci Resolve and Premiere Pro via API + hotkeys + GUI fallback.”

Anomalous package hides outbound data exfiltrationAnomalous package runs an obfuscated install hook

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.