Hostile 100% javascript Download

react-native-international-phone-number 0.11.8

Base64 decode + eval in same fileNode.js package targets credentials for HTTP exfiltration
SHA-256132126a8cdf5ef6c5f01273df84b1103d5e29b806493cf27cfe952926bf54725
URLhttps://registry.npmjs.org/react-native-international-phone-number/-/react-native-international-phone-number-0.11.8.tgz
MaleculeO₅(As₆S₇CDyXe₂)H₃(CmDb₂Po₂)Md(Pa₅)

Also flagged by osv (MAL-2026-1932: Malicious code in react-native-international-phone-number (npm)) +3 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.