Hostile 100% javascript Download

db-query-log 1.0.1

Compiles hidden remote payload

JsonKeeper payload compiled as Node modulenpm package compiles JsonKeeper payload
SHA-256d952cf09882000176856094dcc748fa975563bbbab6d953b9ec53e493a25b845

Also flagged by osv (MAL-2026-6539: Malicious code in db-query-log (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.