bqq1@1.0.0

Analysis

bqq1@1.0.0 ships a Windows clipboard and screen exfiltration tool. On execution it auto-installs Python and dependencies, then runs a hidden GUI monitor that continuously reads the system clipboard and POSTs every clipboard change, full-screen screenshots (base64-encoded), and on-screen text extracted via UI Automation to the remote endpoint hxxps://iq-sec[.]vercel[.]app/api. The tool runs with a blank/transparent hidden window and stealth hotkeys, so clipboard contents (which may include passwords, tokens, and other sensitive data) and screen captures are silently shipped to the third-party server.