md5

7c1a3a2eea2fa01246179bcfcd2648b0

discovered 2026-07-01

scripts/postinstall.js md5 in @tqm-mfe/[email protected]. ~182 KB obfuscator.io-style single-line payload, RC4/XOR-behind-base64 obfuscation class (same family as @marketfront Wave 4). Differs from the 5.5.0 postinstall.js.

Campaigns

Linked packages

Read the full analysis →