Critical Malware Feed Entry Detected 2026-07-02
Malware feed entry — detected by codelake scanners. This package was flagged malicious by our own detection pipeline. See the rules that fired and the package identifiers below. Full analysis, timeline and IOCs live on hand-curated advisories at /advisories; this page is the machine-generated receipt for the live feed.
Detection details
[email protected] published to npm, flagged by codelake scanners on 2026-07-02 02:11 UTC.
Detector rules that fired on this package:
- Scan hit its resource budget before finishing — package too large/complex to fully analyze; flagged for manual review (resisting the scanner is itself a risk signal)
behavior.scan.incomplete - Source writes to an AI-agent config/instruction file (CLAUDE.md / .claude / .cursor / MCP config / copilot-instructions / agent rules) — agent-control-surface tampering
behavior.static.agent-config-tamper - Source spawns a child process with a non-literal command
behavior.static.child-spawn-dynamic - Source decodes a payload (base64/hex/unescape) and dynamically exec's it (eval/Function/vm) in the same file — packed-payload dropper
behavior.static.decode-exec - Source executes a string as code (new Function / vm.run* / setTimeout("...")) — dynamic-eval pattern
behavior.static.dynamic-exec - Source issues a PUT/POST request reading local files, with a sensitive source or suspicious destination — outbound file-upload exfil
behavior.static.exfil-outbound-upload - Source contains a hard-coded GitHub token (ghp_/gho_/ghu_/ghs_/ghr_) — leaked credential
behavior.static.github-token - Source contains a hard-coded ephemeral URL (raw IP / .top / .xyz / pastebin / discord webhook)
behavior.static.hidden-fetch - Source assembles a string from short literal fragments ("ev"+"al") — no legit reason; classic keyword/command-hiding obfuscation
behavior.static.obfuscation-string-concat - Source opens a raw socket and spawns a child process in the same module — reverse-shell pattern
behavior.static.reverse-shell - Source reads a credential-shaped env var and exfiltrates it (encoding / file-harvest / C2 context) alongside an outbound call
behavior.static.secret-exfil - Source references a sensitive filesystem path (~/.ssh, /mnt/user-data, .aws/credentials, ...) — secret/workspace harvest
behavior.static.sensitive-path - Source references a C2 / exfil host (Telegram bot API, ngrok, webhook.site, requestbin, oast/interactsh, transfer.sh) — near-exclusive to malware
behavior.static.suspicious-host - Source opens a raw TCP socket from a user-controlled host
behavior.static.tcp-dial
This is an auto-generated entry in the codelake malware feed. Hand-curated deep case studies live on /advisories.