Hostile 100% javascript Download

@ensdomains/ens-contracts 1.6.1

JavaScript writes credential workflow wormGitHub Actions secret name recon
SHA-256bbfec0f91c12111619f57ab816742ad0ec9aaa6653b6cd5b4740e8a2f14bf4fa
URLhttps://registry.npmjs.org/@ensdomains/ens-contracts/-/ens-contracts-1.6.1.tgz
MaleculeO₁₁(As₁₃S₁₃C₈Ca₅Co₂EuI₃LaDy₅PXe₄)H₆(Os₄Po₉Cm₇CrDb₈F₃)Md₄(Pa₇BiInPt)

Also flagged by osv (MAL-2025-190931: Malicious code in @ensdomains/ens-contracts (npm)) +3 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.