Open-source atomic malware analysis

Analyze another

dolyame-ui-inputsecure 35.8.1

NPM
Verdict: HOSTILE
SHA256: 9a7ccaf5f04ae41dcda9557ce1a40b898be8fd9bc18d94514c9db44cf7fa565b · 100%
AI Supply chain trojan with DNS tunneling
Mal-ecule
K(Mc)O₃(C₃SAs)H₆(Cm₈CrDb₄F₄Os₅Po₉)Md(In)
Size 19.8 KB download
First seen 16 days ago
Analyzed 14 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source r.cnpmjs.org
Also detected by osv+1 more

Loading file contents…

Loading traits…

Identity

SHA-256 9a7ccaf5f04ae41dcda9557ce1a40b898be8fd9bc18d94514c9db44cf7fa565b
Canonical SHA-256 1892844e0a645543906e486e10b43f83f664cf0c57d1cd8cb1756f2413a6bf7b
Filename dolyame-ui-inputsecure-35.8.1.tgz
Package dolyame-ui-inputsecure
Version 35.8.1
PURL pkg:npm/[email protected]

Origin

Source forager
Feed supplychainattack.org
Ecosystem javascript
Domain cnpmjs.org
URL https://r.cnpmjs.org/dolyame-ui-inputsecure/-/dolyame-ui-inputsecure-35.8.1.tgz

Timeline

First seen 8 Aug 2026 13:03 UTC
First analyzed 10 Aug 2026 08:15 UTC
Last analyzed 10 Aug 2026 08:15 UTC
Last updated 10 Aug 2026 08:15 UTC

Labeling

Label bad
Label source harvest
Traits version 73866