Hostile 100% javascript Download

@antv/async-hook 2.3.9

preinstall executes obfuscated payload

Mini Shai-Hulud bun install-time wormMini Shai-Hulud github:antvis/G2 dead-drop
SHA-256cea2c8bcba47abb197a111ae71fe8cb171658cfc230d3047c9b96c4cd7d5d6fe
URLhttps://registry.npmjs.org/@antv/async-hook/-/async-hook-2.3.9.tgz
MaleculeK₂(McLi)O₄(S₃As₅CaDy)H₆(Po₂Cm₇CrDb₁₃Os₃Ti)Md₃(InPa₆)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.