Open-source atomic malware analysis

Analyze another

@bobfrankston/rmfmail 1.2.182

TAR.GZ
Verdict: SUSPICIOUS
“Local-first email client with IMAP sync and standalone native app”
AI IMAP credentials logged to remote URL

Loading file contents…

Loading traits…

Identity

SHA-256 d317774a35e339fe07917db20cd358729a305db10c53ab9c0e59ee9da046a923
Canonical SHA-256 0000c62472bb677dafdc1715795a6a2e7fedccdf15a995d73c02a29cd78f20b3
Filename @bobfrankston-rmfmail-1.2.182.tgz
Package @bobfrankston/rmfmail
Version 1.2.182
PURL pkg:npm/@bobfrankston/[email protected]

Origin

Source forager
Feed aikido.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@bobfrankston/rmfmail/-/rmfmail-1.2.182.tgz

Timeline

First seen 29 Jul 2026 01:31 UTC
First analyzed 24 Aug 2026 16:37 UTC
Last analyzed 24 Aug 2026 16:50 UTC
Last updated 24 Aug 2026 16:50 UTC

Labeling

Label bad
Label source harvest
Traits version 72034