acb6f87e440ccb5efe299313e7adb506586e31a6e7381515a9fb2057965f715e

discovered 2026-07-01

postinstall.js payload SHA256 in @emcd-vue/b2b-pay-form@5.8.0 (Wave 3 scope, republished/live as of 2026-07-02).

Campaigns

oob-moika-tech-depconf-2026attributed-to

Linked packages

npm@emcd-vue/b2b-pay-formindicates

Read the full analysis

acb6f87e440ccb5efe299313e7adb506586e31a6e7381515a9fb2057965f715e — IOC — SafeDep Threat Intelligence - Real-time Open Source Software Supply Chain Security