Hostile 100% javascript Download

@remitee-money-transfer/rmt-base 99.99.100

Exfiltrates credentials via preinstall hook

Developer credential target with network exfiltrationnpm package version has inflated major number
SHA-256c55bae984812d05f4611af4cb2fe0dafa42661a55a523034c8df737b9d0acd22
URLhttps://registry.npmjs.org/@remitee-money-transfer/rmt-base/-/rmt-base-99.99.100.tgz
MaleculeO₄(Eu₂S₂CCa)H₂(Cm₇F₃)Md(Pa₆)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.