SafeDep
Install GitHub App

Summary

Note: This report is updated by a verification record

flow/surf-lending DeFi cred-exfil campaign sibling (c1655). preinstall node index.js || true exfils env secrets to raw C2 2.25.140.71:8443/surflending/npm-confusion (verified identical). No-renotify.

Verification Record

The package is marked as malware by OSV: MAL-2026-5801 with source: amazon-inspector

Details

Note: This report is updated by a verification record

bodega-sdk@9.9.9Malicious
Verified
Analysed at: 6/15/26, 5:46 PM
Source: -
SHA256:
Confidence: High