Benign 38% javascript Download

tiny-css-token-parser 1.0.0

Wix registry facade conceals command-output exportnpm package ships Wix registry facade with import-time RCE exfil
SHA-256cea77be21d9635a5cfbecb8b695f5a38657eaf3e6e2d86caa9c7d487e7280558
URLhttps://registry.npmmirror.com/tiny-css-token-parser/-/tiny-css-token-parser-1.0.0.tgz
MaleculeO₂(S₃Eu)H₄(Cm₅Db₃Os₄Po₃)Md₂(In₃Pa₄)

Also flagged by osv (MAL-2026-17525: Malicious code in tiny-css-token-parser (npm)) +3 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.