Hostile 92% javascript Download

@things-factory/email-base 9.0.48

Exfiltrates secrets via webhook.site

Detects a supply chain compromise in NPM packages (TinyColor, CrowdStrike etc.)Downloads latest trufflehog release
SHA-256cbcc7169453c4ca4c31451cc88845829038c1df65226dd64b5018a9b1f5deedc
URLhttps://registry.npmjs.org/@things-factory/email-base/-/email-base-9.0.48.tgz
MaleculeK(Li₅)O₅(Eu₂S₂AsCa₂I)H₆(Cm₂₉Cr₄Db₁₉F₆Os₈Po₁₄)Md₂(Pa₄)Th

Also flagged by osv (MAL-2025-47221: Malicious code in @things-factory/email-base (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.