Story
Why does mathmain need an encrypted loader?
1 report
1 website
1 discussion
Latest report
Overview
Why Does an npm Math Library Need an Encrypted Loader? On this page We found a remote access implant hidden inside [email protected] , an npm package that copies the popular mathjs library. The malicious code ships encrypted. It stays dormant until a program solves a specific equation with the library. That equation is the key. When the key matches, the package decrypts a payload and runs it. The ...
Summary from safedep.io.
Reports
One report so far. Additional coverage will appear here when it is linked to this story.
Community reactions
Each reaction summarizes sampled comments from the linked discussion.
Hacker News · safedep.io
Hacker News discussion ↗
Historical count: 8 · 8 saved in sample · Historical sample
Awaiting analysis