keyed-mutex-map@2.1.2

Analysis

keyed-mutex-map is a thin wrapper whose only substantive code requires the mutex-forge dependency. On install/require, mutex-forge's obfuscated payload (lib/withLoad.min.js, string-array + custom decoder) fingerprints the host (hostname, platform, arch, CPU count, total memory, uptime) and exfiltrates a "System Report" plus wallet/private-key material to api[.]telegram[.]org /bot<token>/sendMessage and slack[.]com/api/chat.postMessage. It embeds Alchemy (eth-sepolia[.]g[.]alchemy[.]com/v2/...) and Infura (sepolia[.]infura[.]io/v3/...) RPC endpoints and uses AES-GCM/PBKDF2 for encrypted command handling. Installing this package transitively runs the implant.