Open-source atomic malware analysis

Analyze another

@bobfrankston/rmfmail 1.2.180

TAR.GZ
Verdict: HOSTILE
“Local-first email client with IMAP sync and standalone native app”
AI install hook exfiltrates environment

Loading file contents…

Loading traits…

Identity

SHA-256 e11efa3f1b26a525d1c2b19ca8429070234d89465823d710c6cda12d5bcd7600
Canonical SHA-256 0000c62472bb677dafdc1715795a6a2e7fedccdf15a995d73c02a29cd78f20b3
Filename @bobfrankston-rmfmail-1.2.180.tgz
Package @bobfrankston/rmfmail
Version 1.2.180
PURL pkg:npm/@bobfrankston/[email protected]

Origin

Source forager
Feed aikido.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@bobfrankston/rmfmail/-/rmfmail-1.2.180.tgz

Timeline

First seen 28 Jul 2026 11:34 UTC
First analyzed 24 Aug 2026 15:59 UTC
Last analyzed 24 Aug 2026 16:18 UTC
Last updated 24 Aug 2026 16:18 UTC

Labeling

Label bad
Label source promoter
Traits version 14c51