Hostile 92% php 1,026 installs Download

gp247/front 3.0.1

Malicious code in bundled JS

“Frontend foundation & CMS package for GP247”

SweetAlert2 region-gated sabotage releaseRegion-gated browser input suppression with looping audio
SHA-256f5594d92d2a8bfdb983ee13872bc58246256f82c0106fa0d81d4a16c2af4976e
URLhttps://api.github.com/repos/gp247net/front/zipball/71a7f6356c52ce34300270495b8503003e25d1cd
MaleculeK₂(McLi)O(I)H₉(Cm₅CrDb₅F₄Hf₃Os₃Po₃TiU₇)Md₂(Pa)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.