Open-source atomic malware analysis

Analyze another

@bobfrankston/rmfmail 1.2.239

TAR.GZ
Verdict: HOSTILE
SHA256: 3a346b951ea4e1d681d94db82643605584d77b02044f45b9e667ad8e6fcebe6a · 92%
“Local-first email client with IMAP sync and standalone native app”
AI Exfiltrates IMAP credentials to external logging URL
Mal-ecule
K₂(AmLi₄)O₇(Eu₂AsCaDy₂PPrS₄)H₁₁(Cm₆₂Cr₂Db₃₁DsF₂₀Hf₂Mg₂Os₂₁Po₃₇Ti₂U₁₁)Md₆(Bi₆Bk₂LiPa₈Pt)
Size 8.3 MB download
First seen 18 days ago
Analyzed 11 days ago
Package pkg:npm/@bobfrankston/[email protected]
Ecosystem javascript
Source registry.npmjs.org
Also detected by 2 sources

Loading file contents…

Loading traits…

Identity

SHA-256 3a346b951ea4e1d681d94db82643605584d77b02044f45b9e667ad8e6fcebe6a
Canonical SHA-256 006fd3a2fa6df1f1f8b79d96b196e7e4cb13677ce0d3ae10250322cc272721de
Filename @bobfrankston-rmfmail-1.2.239.tgz
Package @bobfrankston/rmfmail
Version 1.2.239
PURL pkg:npm/@bobfrankston/[email protected]

Origin

Source forager
Feed aikido.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@bobfrankston/rmfmail/-/rmfmail-1.2.239.tgz

Timeline

First seen 10 Aug 2026 15:23 UTC
First analyzed 17 Aug 2026 21:53 UTC
Last analyzed 17 Aug 2026 21:53 UTC
Last updated 17 Aug 2026 21:53 UTC

Labeling

Label bad
Label source promoter