Open-source atomic malware analysis

Analyze another

tinkoff-boxy-mobile-vivid-heading 20.7.5

NPM
Verdict: HOSTILE
SHA256: ce55dca2f5f81e70c00a7ec774c881515757a59c627a248af99bdf98a6c155f0 · 100%
“device integration”
AI Supply chain trojan with DNS tunneling
Mal-ecule
K(Mc)O₄(C₃SAsCo)H₆(Cm₈CrDb₄F₄Os₅Po₉)Md₂(InPa)
Size 20.6 KB download unavailable
First seen 2 days ago
Analyzed 1 day ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org
Also detected by osv+4 more

Loading file contents…

Loading traits…

Identity

SHA-256 ce55dca2f5f81e70c00a7ec774c881515757a59c627a248af99bdf98a6c155f0
Canonical SHA-256 0fa71e4274c9aeeaa482f906ce0049328892d05284b8b6bc056c154ce713bd97
Filename tinkoff-boxy-mobile-vivid-heading-20.7.5.tgz
Package tinkoff-boxy-mobile-vivid-heading
Version 20.7.5
PURL pkg:npm/[email protected]

Origin

Source forager
Feed osv.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/tinkoff-boxy-mobile-vivid-heading/-/tinkoff-boxy-mobile-vivid-heading-20.7.5.tgz

Timeline

First seen 5 Aug 2026 00:57 UTC
First analyzed 5 Aug 2026 23:53 UTC
Last analyzed 5 Aug 2026 23:53 UTC
Last updated 5 Aug 2026 23:53 UTC

Labeling

Label bad
Label source forager
Traits version b5ca8