Execution on package import
Named by 2 kept items in this workspace.
Search every workspace for Execution on package import. It matches the name as written, so it can find other things that share it.
The items that name it 2
WEL1DROPPER payload executes when the package is imported rather than relying on npm lifecycle/install scripts
guardrails-ai@0.10.1 executes malicious code on import, checking for Linux and downloading a remote Python artifact executed with python3 without integrity verification
All techniques in this workspace.