Hostile 100% javascript Download

smb-portal-uikit 18.1.1

Exfiltrates system info to OOB

NPM victim identifiers exfiltrated to OOBpreinstall runs local JS contacting OOB callback
SHA-256fe583b3dbeb8f776ea74fcd009d71351ffc9e66800fc3d40129faf4ce13cc13d
URLhttps://registry.npmjs.org/smb-portal-uikit/-/smb-portal-uikit-18.1.1.tgz
MaleculeO₃(S₃Dy₃Eu)H₄(Cm₅Db₄Os₆Po₄)Md₂(InPa₂)

Also flagged by osv (MAL-2026-10616: Malicious code in smb-portal-uikit (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.