@bobfrankston/mailx-imap@0.1.112

Analysis

Package depends on multiple sibling packages (@bobfrankston/iflow-direct, @bobfrankston/oauthsupport, @bobfrankston/mailx-store, @bobfrankston/mailx-settings, @bobfrankston/mailx-sync, @bobfrankston/mailx-types) that are known malware. Installing this package pulls in a malicious dependency chain. The package presents as a legitimate IMAP email client library but serves as a distribution vector for malware through its dependency tree.