Hostile 92% javascript Download

arnext 0.1.5

Preinstall executes hidden ELF binary

npm preinstall executes sectionless bundled ELFnpm install hook executes a bundled native binary
SHA-2562d31df07ef8e1717d30ac9c92882e40b8317e5f26bf68a316352c278cfcad3f0

Also flagged by osv (MAL-2026-4482: Malicious code in arnext (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.