bcore-bravo-eslint-config@9.5.7

Analysis

bcore-bravo-eslint-config is a combosquat package that downloads and executes a native binary on require(). On import, it collects a host fingerprint (hostname, username, cwd, Node.js version, PID) and contacts C2 servers at oob-worker[.]cf (subdomains: 99-9b3, 100-416, 101-adf, 102-baf, 103-070) and well1[.]site (subdomains: tin.dl, tina.dl, ldr.dl, win.dl) to download a platform-specific binary. The binary is written to /var/tmp (or %TEMP% on Windows) and executed as a detached process with output discarded. The package has no repository URL and its name impersonates an ESLint configuration package.