Hostile 92% javascript Download

cwao 0.5.6

Preinstall hook executes packed ELF

npm preinstall executes sectionless bundled ELFnpm install hook executes a bundled native binary
SHA-256a49a3c1b7ec66a7f5ae1931e889425359cd9ee6b4f5c562a02ba359bc1b0e1f2

Also flagged by osv (MAL-2026-4544: Malicious code in cwao (npm)) +4 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.