Suspicious 80% vscode Download

moonbit/moonbit-lang 0.7.2026080402

obfuscated code, remote fetch, shell exec

Node launch copies process environmentReferences the toString conversion method
SHA-256def41cb5e0bb7fd54aab38ab9bd0391a426e8010a24316ef29a6185328d930f6
URLhttps://open-vsx.org/api/moonbit/moonbit-lang/0.7.2026080402/file/moonbit.moonbit-lang-0.7.2026080402.vsix
MaleculeK(Li₄)O₄(As₃C₃IXe)H₈(Cm₂₀CrDb₂₇F₅Os₆Po₁₃TiU₂)Md₅(In₈Pa₃Pm₂Pt₂)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.