totally-safe-util

MAL-2026-2500

Malicious code in totally-safe-util (npm)

Details

Multiple suspicious behaviors: postinstall script, hex obfuscation, OS command execution to open a Rickroll, and attempt to hide execution.

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (0d45a8a1395a8ff66e2ea74cacd9d8de0ebaa9e88e0170a6907b3e4861a2acc5)
The package totally-safe-util was found to contain malicious code.