Open-source atomic malware analysis

Analyze another

@bobfrankston/rmfmail 1.2.241

TAR.GZ
Verdict: HOSTILE
SHA256: d51c4e92bde0976e741a506752d55f05b13edf859a727a8d2437c2fa5a1f66a5 · 92%
“Local-first email client with IMAP sync and standalone native app”
AI IMAP credentials exfiltrated to remote log
Mal-ecule
K₂(AmLi₄)O₈(Eu₂S₅AsCaCoDy₃PPr)H₁₁(Cm₆₀Cr₂Db₃₀DsF₂₀Hf₂Mg₂Os₂₁Po₃₆Ti₂U₁₀)Md₆(Bi₆Bk₂LiPa₈Pt)
Size 8.3 MB download
First seen 18 days ago
Analyzed 12 days ago
Package pkg:npm/@bobfrankston/[email protected]
Ecosystem javascript
Source registry.npmjs.org
Also detected by 2 sources

Loading file contents…

Loading traits…

Identity

SHA-256 d51c4e92bde0976e741a506752d55f05b13edf859a727a8d2437c2fa5a1f66a5
Canonical SHA-256 0000c62472bb677dafdc1715795a6a2e7fedccdf15a995d73c02a29cd78f20b3
Filename @bobfrankston-rmfmail-1.2.241.tgz
Package @bobfrankston/rmfmail
Version 1.2.241
PURL pkg:npm/@bobfrankston/[email protected]

Origin

Source forager
Feed aikido.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@bobfrankston/rmfmail/-/rmfmail-1.2.241.tgz

Timeline

First seen 10 Aug 2026 15:00 UTC
First analyzed 17 Aug 2026 05:25 UTC
Last analyzed 17 Aug 2026 05:25 UTC
Last updated 17 Aug 2026 05:25 UTC

Labeling

Label bad
Label source promoter