Hostile 100% javascript Download

@crowdstrike/glide-core 0.34.3

Shai-Hulud worm payload embedded

Shai-Hulud workflow worm markersRepublishes maintainer packages using harvested credentials
SHA-25617067d71329df6359268d9a47f3db240072199d13607ede08be33b5777cefdab
URLhttps://registry.npmjs.org/@crowdstrike/glide-core/-/glide-core-0.34.3.tgz
MaleculeK₃(McLi₄Te)O₇(Eu₃LaXeAsCa₂IS)H₈(Cm₃₂Cr₄Db₂₁F₄Hf₂Os₁₁Po₁₃U₅)Md₂(Pa₉)Th

Also flagged by osv (MAL-2025-47235: Malicious code in @crowdstrike/glide-core (npm)) +3 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.