Hostile 92% javascript Download

ts-rand-sdk 1.0.4

Obfuscated code, security hold, removed version

“security holding package”

Published npm package carries a shift-decoded Function loaderPackaged shift-decoded payload executes with Node globals
SHA-256dd4ac4d837cbddb5853c8b2f791122a7e6a32d4b2fbabad0989c15397acc9b9c

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.