Suspicious 85% javascript Download

@agmesh/linux-x64-musl 0.11.2

Hostile findings indicate data exfiltration

“Platform binary package for `agmesh` on linux/x64 musl.”

Anomalous package hides outbound data exfiltrationAnomalous package runs an obfuscated install hook

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.