Open-source atomic malware analysis

Analyze another

@bobfrankston/rmfmail 1.2.258

TAR.GZ
Verdict: HOSTILE
“Local-first email client with IMAP sync and standalone native app”
AI Exfiltrates IMAP credentials to external URL

Loading file contents…

Loading traits…

Identity

SHA-256 05826891ef91495f18302be2b3c83cbd321062f90b1b6f9749a2ff173efaa120
Canonical SHA-256 00262c43e2b04c05268d3dde898335e81c1dc70212e17ade5bd9efb6115f489d
Filename @bobfrankston-rmfmail-1.2.258.tgz
Package @bobfrankston/rmfmail
Version 1.2.258
PURL pkg:npm/@bobfrankston/[email protected]

Origin

Source forager
Feed aikido.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@bobfrankston/rmfmail/-/rmfmail-1.2.258.tgz

Timeline

First seen 13 Aug 2026 23:01 UTC
First analyzed 14 Aug 2026 21:50 UTC
Last analyzed 14 Aug 2026 21:50 UTC
Last updated 14 Aug 2026 21:50 UTC

Labeling

Label bad
Label source promoter
Traits version fb1c6