isotope13 labs

Crit

Ecosystem

Domain

Confirmed

sfly-services 4.1.1 Sep 6 javascript

aa4dc3d2e972c8ec0dceca060016bbf018dcaa3f56f7134046ccb89a706fedf6 ✓ O₃(SCEu)H₂(CmPo₃)Md₃(InPa)

100% Exfiltrates data via webhook.site

sfly-services 4.1.4 Sep 6 javascript

ccc51de49e0c2506a59cfa47a8f192d5a913122d8dd45c81b6189b03463503a1 ✓ O₃(SCEu)H₂(CmPo₃)Md₃(InPa)

100% Exfiltrates data via webhook.site

sfly-services 4.1.5 Sep 6 javascript

46f6d3a51dacaa8b7119919223e65dae5c9b219690d01cde76a0bb6e3712ad39 ✓ O₃(SCEu)H₂(CmPo₃)Md₃(InPa)

100% Exfiltrates files to attacker webhook

sfly-services 4.1.2 Sep 6 javascript

694cedc4b1dba4dd6c9f00ca92784f56e61f2f66c537116ffd9b51ac5e68c18f ✓ O₃(SCEu)H₂(CmPo₃)Md₃(InPa)

100% Preinstall hook executes exploit.js

sfly-services 4.0.9 Sep 4 javascript

e176c39810b787e80825f518dbe5f4a16bd09d0203e94076a240bcc0c8bd5bc2 ✓ O₃(SCEu)H₂(CmPo₃)Md₃(InPa)

100% preinstall hook runs exploit.js

Index