Hostile 100% javascript Download

ts-einkle-slot 0.1.1

Impersonates popular library big.js

“A small, fast, easy-to-use library for arbitrary-precision decimal arithmetic”

Impersonation of the popular big.js libraryLoader chain swallows promise results
SHA-256caa006874f115ca1e64b4f68226de5160f299a58e373f360c6767e52c000b60d
URLhttps://registry.npmmirror.com/ts-einkle-slot/-/ts-einkle-slot-0.1.1.tgz
MaleculeO(S₂)Md(Pa₃)

Also flagged by osv (MAL-2026-6525: Malicious code in ts-einkle-slot (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.