Disclosures
Disclosures
In-depth technical write-ups of packages analysed by Protet. Each one states what was observed, what was recovered from the artefact, and what could not be determined. Distinct from the automated package-analysis feed, which is generated per detonation.
-
app-soda-layer@2.1.6
Recovered in full from a sandbox trace after the package was removed from the registry. Reads wallet keys and application secrets and uploads their contents; requests an SSH public key from a remote host and appends it to ~/.ssh/authorized_keys.