Open-source atomic malware analysis

Analyze another

@bobfrankston/rmfmail 1.2.115

TAR.GZ
Verdict: SUSPICIOUS
“Local-first email client with IMAP sync and standalone native app”
AI Hardcoded credentials and telemetry endpoint

Loading file contents…

Loading traits…

Identity

SHA-256 566aae435b4b5c16f74c0e43ff85ea3f87dc81a81f6181f5b2246d4997679fde
Canonical SHA-256 000ac7dc9366969db9d1e41810a3a27c747a7623535d856eecc2de86cfed80c7
Filename @bobfrankston-rmfmail-1.2.115.tgz
Package @bobfrankston/rmfmail
Version 1.2.115
PURL pkg:npm/@bobfrankston/[email protected]

Origin

Source forager
Feed aikido.dev
Ecosystem javascript
Domain cnpmjs.org
URL https://r.cnpmjs.org/@bobfrankston/rmfmail/-/rmfmail-1.2.115.tgz

Timeline

First seen 9 Jul 2026 09:59 UTC
First analyzed 9 Jul 2026 19:42 UTC
Last analyzed 13 Jul 2026 19:37 UTC
Last updated 13 Jul 2026 19:36 UTC

Labeling

Label bad
Label source cyclotron:sighted
Traits version a108d