Hostile 100% javascript Download

exxpress-tool 1.0.5

npm postinstall credential harvester

Module-load posts harvested credentials to a direct-IP endpointReads developer credential stores and POSTs to a direct-IP HTTP endpoint
SHA-256c2c6a8bfcf1050d976f2a5863116749998ad21e90bbd43fa62eac1f4fd1bcdcf
URLhttps://registry.npmjs.org/exxpress-tool/-/exxpress-tool-1.0.5.tgz
MaleculeK₂(Am₂Li)O₅(Ca₃S₅CEuDy₂)H₆(Cm₆CrDb₅F₈Os₆Po₂)Md₂(InPa)

Also flagged by osv (MAL-2026-3762: Malicious code in exxpress-tool (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.