Open-source atomic malware analysis

Analyze another

@bobfrankston/rmfmail 1.2.173

TAR.GZ
Verdict: HOSTILE
“Local-first email client with IMAP sync and standalone native app”
AI install hook exfiltrates environment variables

Loading file contents…

Loading traits…

Identity

SHA-256 5c08419e069765fc60ff445452680265745606845170106068215b12bea6af99
Canonical SHA-256 0000c62472bb677dafdc1715795a6a2e7fedccdf15a995d73c02a29cd78f20b3
Filename @bobfrankston-rmfmail-1.2.173.tgz
Package @bobfrankston/rmfmail
Version 1.2.173
PURL pkg:npm/@bobfrankston/[email protected]

Origin

Source forager
Feed aikido.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@bobfrankston/rmfmail/-/rmfmail-1.2.173.tgz

Timeline

First seen 25 Jul 2026 17:04 UTC
First analyzed 24 Aug 2026 15:20 UTC
Last analyzed 24 Aug 2026 15:21 UTC
Last updated 24 Aug 2026 15:21 UTC

Labeling

Label bad
Label source promoter
Traits version 14c51