Loading npm security reports…
Configuration manager for Grafeno
Installing the package runs a remote shell payload and creates cron-based persistence. The payload is fetched from a raw IP address and executed without inspection.
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkgThe preinstall hook downloads a shell script from a raw IP address and pipes it directly to Bash.
package.jsonView on unpkg · L7Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkgThe preinstall hook downloads a shell script from a raw IP address and pipes it directly to Bash.
package.jsonView on unpkg · L7