← All Challenges
Challenge 58 of 66
Dependency Doom
🔴 Elite
AppSec
+150 XP
A popular npm package was compromised. Analyze the malicious code injected in a postinstall script to find the C2 domain.
Check package.json postinstall scripts and look for obfuscated code in the dependency tree.
🏆 Challenge Complete!
Know someone who would enjoy this? Challenge them.
Keep going
Make it count.
Join free to earn XP for what you read and solve, keep a streak, and track your progress.
Join free