Benign go Download

github.com/gesellix/bose-soundtouch v0.115.0

Legitimate open-source IoT control software

Anomalous package hides outbound data exfiltrationAnomalous package runs an obfuscated install hook
SHA-256edab9e17aaaf36eca6c9b0b7f12dfc360692d067632cfad9eacaa1f7e2266607
URLhttps://proxy.golang.org/github.com/gesellix/bose-soundtouch/@v/v0.115.0.zip
MaleculeO₁₃(S₃AlAsC₆CaDy₄Er₃EuI₂LaP₃Pr₃Xe₂)H₇(Cm₂₆Cr₄Db₇F₁₂Os₁₅Po₁₁U₃)Md₃(Bk₂Pa)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.