Hostile 92% javascript Download

sfly-services 4.0.9

preinstall hook runs exploit.js

preinstall runs local JS contacting OOB callbackpreinstall hook runs a local Node.js script
SHA-256e176c39810b787e80825f518dbe5f4a16bd09d0203e94076a240bcc0c8bd5bc2
URLhttps://registry.npmjs.org/sfly-services/-/sfly-services-4.0.9.tgz
MaleculeO₃(SCEu)H₂(CmPo₃)Md₃(InPa)

Also flagged by osv (MAL-2025-45999: Malicious code in sfly-services (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.