Hostile 92% javascript Download

@7nohe/openapi-react-query-codegen 1.6.3

binding.gyp executes OS command

“OpenAPI React Query Codegen”

Python eval escape executes an OS commandnpm binding.gyp Python escape executes command
SHA-2561757c9203143db4958b53cb5c97af64bfe46ad57a07764fed59bbb886a71f1da
URLhttps://registry.npmjs.org/@7nohe/openapi-react-query-codegen/-/openapi-react-query-codegen-1.6.3.tgz
MaleculeO₃(S₂XeAs₂)H₂(Db₅F₂)Md(Pa₇)

Also flagged by https://www.aikido.dev/blog/rss.xml (Popular code generator for TanStack Query hit by supply chain worm), https://www.stepsecurity.io/blog/rss.xml (@7nohe/openapi-react-query-codegen Compromised Through an Exposed npm Publishing Workflow), osm (This legitimate package has been compromised by a threat actor using a GitHub actions worm-like attack.), osv (MAL-2026-15494: Malicious code in @7nohe/openapi-react-query-codegen (npm)) +2 more.

Evidence

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.