Open-source atomic malware analysis

Analyze another

@bobfrankston/rmfmail 1.2.216

TAR.GZ
Verdict: SUSPICIOUS
SHA256: ff5b1295708c26f72a52025349881776f8be87370d76ea9ec49f7de1569f93c0 · 54%
“Local-first email client with IMAP sync and standalone native app”
AI IMAP credentials sent to remote log
Mal-ecule
K₂(Am₂Li₆)O₈(EuCCaDy₂ErPPrS₄)H₁₁(Cm₆₄Cr₂Db₃₄DsF₂₀Hf₂Mg₂Os₂₂Po₄₁Ti₃U₁₂)Md₆(Bi₅Bk₃InPa₁₂Pt)
Size 8.2 MB download
First seen 25 days ago
Analyzed 1 day ago
Package pkg:npm/@bobfrankston/[email protected]
Ecosystem javascript
Source registry.npmjs.org
Also detected by 2 sources

Loading file contents…

Loading traits…

Identity

SHA-256 ff5b1295708c26f72a52025349881776f8be87370d76ea9ec49f7de1569f93c0
Canonical SHA-256 0000c62472bb677dafdc1715795a6a2e7fedccdf15a995d73c02a29cd78f20b3
Filename @bobfrankston-rmfmail-1.2.216.tgz
Package @bobfrankston/rmfmail
Version 1.2.216
PURL pkg:npm/@bobfrankston/[email protected]

Origin

Source forager
Feed aikido.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@bobfrankston/rmfmail/-/rmfmail-1.2.216.tgz

Timeline

First seen 4 Aug 2026 07:59 UTC
First analyzed 27 Aug 2026 13:04 UTC
Last analyzed 27 Aug 2026 14:10 UTC
Last updated 27 Aug 2026 14:10 UTC

Labeling

Label bad
Label source promoter
Traits version b59b7