On January 12, 2024 Phylum’s automated risk detection platform alerted us to a suspicious publication on npm. The package in question, oscompatible, contained a few strange binaries, including a single exe file, a single DLL file, and an encrypted dat file. The only JavaScript file present, index.js, simply
This is an automated archive.
The original was posted on /r/netsec by /u/louis11 on 2024-01-19 03:17:35+00:00.
