Hostile 92% javascript Download

zkjson 0.8.5

Preinstall executes hidden ELF binary

npm preinstall executes sectionless bundled ELFnpm install hook executes a bundled native binary
SHA-2563dcae29780a4658bacb3e220abb7c95d877d627471d8d6799951716d2036c6ab

Also flagged by osv (MAL-2026-4739: Malicious code in zkjson (npm)) +4 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.