Open-source atomic malware analysis

Analyze another

@bobfrankston/rmfmail 1.2.110

TAR.GZ
Verdict: SUSPICIOUS
“Local-first email client with IMAP sync and standalone native app”
AI Hardcoded credentials and external telemetry

Loading file contents…

Loading traits…

Identity

SHA-256 f00060f82d4f4611da49d921e4d8e2b735fdc1d5dc1c3c77c3d127689679bf97
Canonical SHA-256 000ac7dc9366969db9d1e41810a3a27c747a7623535d856eecc2de86cfed80c7
Filename @bobfrankston-rmfmail-1.2.110.tgz
Package @bobfrankston/rmfmail
Version 1.2.110
PURL pkg:npm/@bobfrankston/[email protected]

Origin

Source forager
Feed aikido.dev
Ecosystem javascript
Domain cnpmjs.org
URL https://r.cnpmjs.org/@bobfrankston/rmfmail/-/rmfmail-1.2.110.tgz

Timeline

First seen 9 Jul 2026 07:16 UTC
First analyzed 9 Jul 2026 16:09 UTC
Last analyzed 13 Jul 2026 21:01 UTC
Last updated 13 Jul 2026 21:00 UTC

Labeling

Label bad
Label source cyclotron:sighted
Traits version a108d