Hostile 100% javascript Download

react-simple-utils-kit v1.2.2

Exfiltrates Coze API tokens and data

execSync curl JSON POSTs recon payloadStable-version install-hook package lacks provenance
SHA-256f205dbf118590ac4c03a52ea3479941a8b2ff7c5b8d93fd4b51005e9479b9e93

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.