← All Challenges
Challenge 58 of 66

Dependency Doom

🔴 Elite AppSec +150 XP

A popular npm package was compromised. Analyze the malicious code injected in a postinstall script to find the C2 domain.

Dependency Doom // sandbox
Check package.json postinstall scripts and look for obfuscated code in the dependency tree.

🏆 Challenge Complete!

+150 XP earned
Next Challenge →