dbconnectify@1.0.2

One or more suspicious static signals were detected.

Runtime invocation of DivbloxDatabaseConnector.queryDBConnect().

Arbitrary code execution with the permissions of the consuming application.

Base64-hidden remote payload fetch followed by Module._compile execution.

index.js exposes queryDBConnect(), which decodes a concealed JSONBin URL, retrieves a field named cookie, and passes its contents to Node's private Module._compile API. Invoking that method gives the remote endpoint control of JavaScript execution in the consumer process; the package contains no legitimate database-related reason for this behavior.

The remote, concealed, dynamically compiled payload is a concrete remote-code-execution mechanism, not ordinary database connectivity. Lack of an install hook limits automatic activation but does not remove the malicious callable payload loader.