Open-source atomic malware analysis

Analyze another

@aerodrome-finance/slipstream 1.1.1

NPM
Verdict: HOSTILE
SHA256: c6e29a52a82f7e05aea1aae2f2f06f4d96640adb02a6528445e5aa0383fb58f3 · 100%
AI Credential stealer with exfiltration
Mal-ecule
O₅(Ca₄Eu₃S₅ErDy₂)H₆(Cm₃CrDbF₄Os₃Po₅)Md₂(InPa₂)
Size 1.8 KB download
First seen 2 days ago
Analyzed 1 day ago
Package pkg:npm/%40aerodrome-finance/[email protected]
Ecosystem javascript
Source r.cnpmjs.org
Also detected by osmosv+6 more

Loading file contents…

Loading traits…

Identity

SHA-256 c6e29a52a82f7e05aea1aae2f2f06f4d96640adb02a6528445e5aa0383fb58f3
Canonical SHA-256 3dc73f6c5927eaf6efef4af791fc2cde8a44c1ca2c78afe4fc9c9d41a90feace
Filename @aerodrome-finance-slipstream-1.1.1.tgz
Package @aerodrome-finance/slipstream
Version 1.1.1
PURL pkg:npm/%40aerodrome-finance/[email protected]

Origin

Source forager
Feed osv.dev
Ecosystem javascript
Domain cnpmjs.org
URL https://r.cnpmjs.org/@aerodrome-finance/slipstream/-/slipstream-1.1.1.tgz

Timeline

First seen 11 Aug 2026 07:12 UTC
First analyzed 12 Aug 2026 17:29 UTC
Last analyzed 12 Aug 2026 17:29 UTC
Last updated 12 Aug 2026 17:29 UTC

Labeling

Label bad
Label source promoter
Traits version 73866