Hostile 100% javascript Download

wao 0.41.2

Supply-chain attack dropperLong unbroken alphanumeric line comment
SHA-256de20e219b3da930e95fa48e5cc153493dedd57c79bd8975cc1c24dd975208011
URLhttps://registry.npmjs.org/wao/-/wao-0.41.2.tgz
MaleculeO₁₀(C₄As₁₄Ca₂Er₃EuS₇AlCoPXe₂)H₇(Cm₇Po₉CrDb₄F₃MgOs₃)Md₅(Pa₇Bi₂BkHeLi₂)

Also flagged by osv (MAL-2026-4711: Malicious code in wao (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.