Benign go Download

github.com/gomatic/yze-sql-keywordcase v0.4.4

Anomalous package hides outbound data exfiltrationAnomalous package runs an obfuscated install hook
SHA-256ec058e29f2ff7cd895697ed7d110685acc2ea898ef05d6c2a2391941df459339
URLhttps://proxy.golang.org/github.com/gomatic/yze-sql-keywordcase/@v/v0.4.4.zip
MaleculeO(S)Md(Bk)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.