Hostile 100% javascript Download

@squawk/airspace-data 0.5.5

Kubernetes token pivots through cloud metadatapreinstall setup.mjs bootstraps Bun runtime
SHA-256083950e377dd63e3f9c77daff3238eb20998cc023591ddfbc1774cd24b8ec305
URLhttps://registry.npmjs.org/@squawk/airspace-data/-/airspace-data-0.5.5.tgz
MaleculeK(Li)O₆(C₂Ca₃CoLaS₄As₄)H₇(Po₇Cm₂₄Cr₃Db₁₉F₁₂Os₇Ti)Md₃(InPa₇)Th

Also flagged by osv (MAL-2026-3438: Malicious code in @squawk/airspace-data (npm)) +3 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.