Hostile 100% javascript Download

buildkite-test-collector-jest-example 99.99.10

Dependency confusion exfiltration POC

Inflated-major package runs postinstall loaderHollow PoC package ships an extreme SemVer major
SHA-256e2ed43f83e573e49294cc70d2bb037f3cf830fcb1d23e31ae631ad64f5a39779
URLhttps://registry.npmjs.org/buildkite-test-collector-jest-example/-/buildkite-test-collector-jest-example-99.99.10.tgz
MaleculeO₂(Dy₂S₄)H₄(Cm₆Db₃Os₃Po₂)Md₂(Pa₅In)

Also flagged by osv (MAL-2026-2733: Malicious code in buildkite-test-collector-jest-example (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.