Hostile 100% javascript Download

@ensdomains/ens-archived-contracts 0.0.3

JavaScript writes credential workflow wormGitHub Actions secret name recon
SHA-256cb4cc90b59e9e9d771ca8a9f945e34276b7b0af27089bbb5aabebfde68835813
URLhttps://registry.npmjs.org/@ensdomains/ens-archived-contracts/-/ens-archived-contracts-0.0.3.tgz
MaleculeO₁₁(As₉S₁₁C₃Ca₃CoEuILaDy₄PXe₄)H₆(Os₃Po₈Cm₆CrDb₅F)Md₂(Pa₃In)

Also flagged by osv (MAL-2025-190805: Malicious code in @ensdomains/ens-archived-contracts (npm)) +3 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.