chain-js-utils@2.1.1

Analysis

chain-js-utils@2.1.1 is a trojanized logging utility that functions as a remote code execution downloader. When the exported function is called, it spawns a detached background Node.js process that fetches a payload from hxxps://api[.]jsonsilo[.]com/public/94b14d9d-6286-4b13-a7fe-8442e55a31b4 and executes it via the Function constructor with access to require(). The C2 domain is api[.]jsonsilo[.]com. The package also references a secondary domain vercel-five-coral[.]vercel[.]app in its bundled .env file.