Hostile 100% javascript Download

v0-runtime 999.999.6003

OOB exfil, fake version, install hooks

JavaScript accesses hostname near an OOB endpoint and HTTP requestInflated-major package runs postinstall loader
SHA-256e40ac9e2d10effff2b39f375a91b95eaac6a82668893e2b062b7972ae9d25130
URLhttps://registry.npmjs.org/v0-runtime/-/v0-runtime-999.999.6003.tgz
MaleculeO₃(Eu₂S₁₁Xe)H₄(Cm₅DbOs₂Po)Md₂(Pa₄In)

Also flagged by osv (MAL-2025-48089: Malicious code in v0-runtime (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.