malware npm

captainindia

discovered 2026-05-27

Wave 2 representative package from terminal3airport. Obfuscated JS with hex variable names (_0x patterns), randomized filenames. Same adware proxy payload.

Threat types

other

Malicious versions

  • 1.1.2
Read the full analysis →