Malicious code in tokocrytodev (npm)

Source: amazon-inspector 09fa98b6fd8313abbfeb250d10c12db28975f7bb12742f56dd5f1a3e1959d6d1 On require of index.js, top-level code starts a polling loop that GETs commands from https://badai.run.place/cekapppiapi.php?uid=, executes them via childprocess.exec, and POSTs AES-256-ECB-encrypted...

Malicious code in tokocrytodev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88f51898e05da09842f561ce72f06378a6718f778fa0335b68bb4c0fda8cc5a6 On module load, tokocrytodev instantiates a StealthC2 agent and starts a polling loop that fetches commands from...