2025 07-05-mre-config-react-v1.0.5

Exfiltrates system info to OOB domain

JavaScript accesses hostname near an OOB endpoint and HTTP requestNode package beacons host identity to OAST
SHA-256ce3963dc82ce38ce3e5c00c77596a3fe69b9ab9ababc7ba4d1a6978cad5b6393

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.