Skip to content

Instantly share code, notes, and snippets.

View dbidwell94's full-sized avatar
🏠
Working from home

Devin Bidwell dbidwell94

🏠
Working from home
View GitHub Profile
@dbidwell94
dbidwell94 / debug.md
Created September 8, 2025 18:58
Analysis of Malicious Cryptocurrency-Draining Script -- debug.js

Analysis of Malicious Cryptocurrency-Draining Script

This is a highly malicious cryptocurrency-draining script. 🚨 Its purpose is to steal cryptocurrency from users who visit a website that has this code running. This type of malware is often hidden within compromised npm packages, leading to a "supply chain attack" where developers unknowingly include the malicious code in their applications.

The code is heavily obfuscated (intentionally made difficult to read) to hide its true purpose.


How It Works