priority-mutex-lane@2.5.1

Analysis

priority-mutex-lane is a thin wrapper package whose only substantive code requires the dependency mutex-forge. Installing it pulls in mutex-forge, a heavily obfuscated module that fingerprints the host (hostname, platform, CPU count, total memory, uptime), reads private keys, and exfiltrates a "System Report" to Telegram (api[.]telegram[.]org /sendMessage) and Slack (slack[.]com /api/chat.postMessage) using hardcoded bot tokens, while also interacting with Ethereum Sepolia RPC endpoints (infura[.]io, alchemy[.]com). The wrapper serves as a delivery vehicle for this malicious dependency.