MAL-2026-4621
See a problem?- Import Source
- https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/nolimit-x/MAL-2026-4621.json
- JSON Data
- https://api.osv.dev/v1/vulns/MAL-2026-4621
- Published
- 2026-05-20T09:07:46Z
- Modified
- 2026-06-12T20:01:55.536310048Z
- Summary
- Malicious code in nolimit-x (npm)
- Details
-
-= Per source details. Do not edit below this line.=-
Source: amazon-inspector (92a244ab5171edadc3082bc97d5b0834c4cfe98f2e5b6437503a30a7c1ac38aa)
nolimit-x ships an entirely obfuscator.io-packed runtime (45 files under.ad/, including the x0.js entrypoint) with no readable source, and devDependencies + the build script confirm the obfuscation is intentional (
build: node scripts/obfuscate.js,javascript-obfuscatorin devDependencies). The decoded entrypoint exposes a CLI offensive toolkit: asendsubcommand for bulk SMS via SMTP-to-carrier email gateways and bulk email; anauthsubcommand performing OAuth device-code flows against Microsoft and Google to obtain SMTP + Microsoft Graph credentials; anextractsubcommand that reads a victim mailbox's contacts via Graph + IMAP and writes them to disk; awebsubcommand that injects a sending panel into a logged-in Chrome webmail tab; adkimsubcommand that generates DKIM keys for arbitrary sender domains; andscan-redirects. README markets it as an "Advanced email sender" with keywords including "red-team" and "smtp". A hardcoded license check (http://api.nolimitent.xyz:4100/api/activate) POSTs hardware ID, license key, hostname, and platform in cleartext when the operator runs license-gated subcommands. main and bin both point at.ad/x0.js, which calls program.parse() at module top level — a consumer that require()s the package will run commander against the consumer's process.argv (no network fires until argv matches a subcommand, but the library/CLI conflation plus pervasive obfuscation make pre-install audit infeasible). The package is a packaged phishing/spam/credential-phishing toolkit dressed as an npm library; installer-side harm is bounded (no auto-exfil at install or import), but the package's purpose is to enable attacks on third parties (mailbox owners, SMS recipients, OAuth account holders), and the obfuscation defeats normal supply-chain audit. - Database specific
{ "malicious-packages-origins": [ { "sha256": "285e977ba4c80fcc1909bd9674ebb12f22d4fbb17431151b6237403d7ac570ed", "source": "amazon-inspector", "modified_time": "2026-05-20T09:16:47Z", "id": "IN-MAL-2026-003509", "versions": [ "1.0.197" ], "import_time": "2026-05-26T05:50:45.841607807Z" }, { "sha256": "ee66863b52eb9cbf1d5e0c370cbac5dfff7a8cc34605d74523bea57f10b5bbea", "source": "amazon-inspector", "modified_time": "2026-05-20T09:07:47Z", "id": "IN-MAL-2026-003508", "versions": [ "1.0.194" ], "import_time": "2026-05-26T05:50:45.739323735Z" }, { "sha256": "fc9b808348f8faf797b0aedc8863482566b3d4a244c20c65f2e65632627a87bd", "source": "amazon-inspector", "modified_time": "2026-05-20T09:07:46Z", "id": "IN-MAL-2026-003507", "versions": [ "1.0.194" ], "import_time": "2026-05-26T05:50:45.623627369Z" }, { "sha256": "5981a3115393441426b90bb57bd7453e51aabc5979a44faf9cccda8c3300dadf", "source": "amazon-inspector", "modified_time": "2026-05-20T09:16:48Z", "versions": [ "1.0.197" ], "id": "IN-MAL-2026-003510", "import_time": "2026-05-26T05:50:45.980017399Z" }, { "sha256": "23ed599e9d8a9e980462d4ebb0a2307b855227945549a93148525453c3dabeae", "source": "amazon-inspector", "modified_time": "2026-06-12T19:08:02Z", "versions": [ "1.0.267" ], "id": "IN-MAL-2026-006065", "import_time": "2026-06-12T19:44:03.970816303Z" }, { "sha256": "80ca928c2d7cad845bcb464915d0054f3df368814318d4ccf1ddcc33d2ed1923", "source": "amazon-inspector", "modified_time": "2026-06-12T19:08:00Z", "id": "IN-MAL-2026-006063", "versions": [ "1.0.264" ], "import_time": "2026-06-12T19:44:03.766164562Z" }, { "sha256": "b16185122ae13b6bd8cd7cc837ba7bf1223a6728160eaa3c8b5f2dbc35c57405", "source": "amazon-inspector", "modified_time": "2026-06-12T19:07:47Z", "versions": [ "1.0.216" ], "id": "IN-MAL-2026-006047", "import_time": "2026-06-12T19:44:02.165559156Z" }, { "sha256": "d6153371f83d2cd05658b0a6c2692dfdfef43ec5c538b58fae43485bb324eb1b", "source": "amazon-inspector", "modified_time": "2026-06-12T19:07:59Z", "id": "IN-MAL-2026-006060", "versions": [ "1.0.263" ], "import_time": "2026-06-12T19:44:03.465948486Z" }, { "sha256": "d707992010c289b472218e2d8342de97c8e874c1deab297bd3267b7c196173eb", "source": "amazon-inspector", "modified_time": "2026-06-12T19:07:51Z", "versions": [ "1.0.227" ], "id": "IN-MAL-2026-006052", "import_time": "2026-06-12T19:44:02.62680434Z" }, { "sha256": "dc3f769bee8b5c1ad848b374a51b148e9173802004fe182fa3953ef3418b517c", "source": "amazon-inspector", "modified_time": "2026-06-12T19:07:54Z", "id": "IN-MAL-2026-006055", "versions": [ "1.0.239" ], "import_time": "2026-06-12T19:44:02.95720792Z" }, { "sha256": "078e1232e1d63a83c4fca84c9bf0c9c543eeebe494af4f9e475ce4a83c421e8b", "source": "amazon-inspector", "modified_time": "2026-06-12T19:08:04Z", "id": "IN-MAL-2026-006068", "versions": [ "1.0.274" ], "import_time": "2026-06-12T19:44:04.272780408Z" }, { "sha256": "12fbda074cf4716a407325f9571ea93c2ebabc3602552fde99b65b965d1d37ca", "source": "amazon-inspector", "modified_time": "2026-06-12T19:07:49Z", "id": "IN-MAL-2026-006049", "versions": [ "1.0.220" ], "import_time": "2026-06-12T19:44:02.342969135Z" }, { "sha256": "a9273ce626498a8ddee3d7270ba0c4a870f2d0582bc16ea1c19ff5e9d2c2e7d2", "source": "amazon-inspector", "modified_time": "2026-06-12T19:07:53Z", "versions": [ "1.0.236" ], "id": "IN-MAL-2026-006054", "import_time": "2026-06-12T19:44:02.843558961Z" }, { "sha256": "aa807efa930f3e0063300471ffc59b70fdd336e0f99b3b395d57e0f4fa27f252", "source": "amazon-inspector", "modified_time": "2026-06-12T19:07:56Z", "id": "IN-MAL-2026-006058", "versions": [ "1.0.240" ], "import_time": "2026-06-12T19:44:03.227843389Z" }, { "sha256": "9d95c9f17d124de75eaa2caa15f790beceac22bb5f026304fb9515e4e4de67cc", "source": "amazon-inspector", "modified_time": "2026-06-12T19:07:57Z", "id": "IN-MAL-2026-006059", "versions": [ "1.0.256" ], "import_time": "2026-06-12T19:44:03.32122468Z" }, { "sha256": "19c4775fdb5f1abc5e171c4b5b486833271c45566a6bf6ee12c0ad25bc4f7425", "source": "amazon-inspector", "modified_time": "2026-06-12T19:07:48Z", "versions": [ "1.0.216" ], "id": "IN-MAL-2026-006048", "import_time": "2026-06-12T19:44:02.258695653Z" }, { "sha256": "1b83f545fb498def872b8da5c7145119bb7c45e8a883a8e9bf7fbbe437f2a4f4", "source": "amazon-inspector", "modified_time": "2026-06-12T19:08:03Z", "versions": [ "1.0.267" ], "id": "IN-MAL-2026-006066", "import_time": "2026-06-12T19:44:04.076657097Z" }, { "sha256": "1ecb7a13ea06404ba255dfce5317b9c5b07a89f0d8c6d0692b04f2e2aaf65b9a", "source": "amazon-inspector", "modified_time": "2026-06-12T19:07:54Z", "id": "IN-MAL-2026-006056", "versions": [ "1.0.239" ], "import_time": "2026-06-12T19:44:03.046237997Z" }, { "sha256": "5ac439a7b8406d37ea24065f0d9e9ad8481c6f2d90a293958e99a18c8655c6f1", "source": "amazon-inspector", "modified_time": "2026-06-12T19:08:01Z", "id": "IN-MAL-2026-006064", "versions": [ "1.0.264" ], "import_time": "2026-06-12T19:44:03.858425237Z" }, { "sha256": "92a244ab5171edadc3082bc97d5b0834c4cfe98f2e5b6437503a30a7c1ac38aa", "source": "amazon-inspector", "modified_time": "2026-06-12T19:07:50Z", "id": "IN-MAL-2026-006051", "versions": [ "1.0.227" ], "import_time": "2026-06-12T19:44:02.531568178Z" }, { "sha256": "fbfe803215201c4a9d944a516d3c94943f0374ce195ee7aed246959478bccc7c", "source": "amazon-inspector", "modified_time": "2026-06-12T19:07:49Z", "id": "IN-MAL-2026-006050", "versions": [ "1.0.220" ], "import_time": "2026-06-12T19:44:02.437530631Z" }, { "sha256": "745d1ae1e6be91a5ada1794f0662d2eda24c14ef0cfbb27dcaa8f0cab21a7d50", "source": "amazon-inspector", "modified_time": "2026-06-12T19:08:04Z", "id": "IN-MAL-2026-006067", "versions": [ "1.0.274" ], "import_time": "2026-06-12T19:44:04.1672562Z" }, { "sha256": "75aaf6fe9ffd8ed13b946abcc11c2d7968ae18b3adef425feb0029ae0bcc1931", "source": "amazon-inspector", "modified_time": "2026-06-12T19:07:52Z", "id": "IN-MAL-2026-006053", "versions": [ "1.0.236" ], "import_time": "2026-06-12T19:44:02.745064461Z" }, { "sha256": "c190144fa33ad8cdc5bb4263fe0c4917fa80fdb42f334aac681496548ff6aa7c", "source": "amazon-inspector", "modified_time": "2026-06-12T19:07:55Z", "id": "IN-MAL-2026-006057", "versions": [ "1.0.240" ], "import_time": "2026-06-12T19:44:03.131123974Z" }, { "sha256": "ca8b7d13f1a6ef614bd9d38cb638f4b1944eb4d2c0565a3373db01abbb883477", "source": "amazon-inspector", "modified_time": "2026-06-12T19:08:00Z", "id": "IN-MAL-2026-006062", "versions": [ "1.0.256" ], "import_time": "2026-06-12T19:44:03.645469258Z" }, { "sha256": "1a9c66d1394323806adccc710c636f9ea7ce0b2024663a5a783bc11510264dc7", "source": "amazon-inspector", "modified_time": "2026-06-12T19:07:59Z", "id": "IN-MAL-2026-006061", "versions": [ "1.0.263" ], "import_time": "2026-06-12T19:44:03.559228685Z" } ] }- References
-
- https://www.npmjs.com/package/nolimit-x/v/1.0.197
- https://www.npmjs.com/package/nolimit-x/v/1.0.194
- https://www.npmjs.com/package/nolimit-x/v/1.0.267
- https://www.npmjs.com/package/nolimit-x/v/1.0.264
- https://www.npmjs.com/package/nolimit-x/v/1.0.216
- https://www.npmjs.com/package/nolimit-x/v/1.0.263
- https://www.npmjs.com/package/nolimit-x/v/1.0.239
- https://www.npmjs.com/package/nolimit-x/v/1.0.220
- https://www.npmjs.com/package/nolimit-x/v/1.0.256
- https://www.npmjs.com/package/nolimit-x/v/1.0.227
- https://www.npmjs.com/package/nolimit-x/v/1.0.274
- https://www.npmjs.com/package/nolimit-x/v/1.0.236
- https://www.npmjs.com/package/nolimit-x/v/1.0.240
- Credits
-
-
- Amazon Inspector - FINDER
-
Affected packages
npm / nolimit-x
Package
- Name
- nolimit-x
- View open source insights on deps.dev
- Purl
- pkg:npm/nolimit-x
Affected versions
1.*
1.0.194
1.0.197
1.0.216
1.0.220
1.0.227
1.0.236
1.0.239
1.0.240
1.0.256
1.0.263
1.0.264
1.0.267
1.0.274
Database specific
cwes
[
{
"name": "Embedded Malicious Code",
"description": "The product contains code that appears to be malicious in nature.",
"cweId": "CWE-506"
},
{
"name": "Embedded Malicious Code",
"description": "The product contains code that appears to be malicious in nature.",
"cweId": "CWE-506"
},
{
"name": "Embedded Malicious Code",
"description": "The product contains code that appears to be malicious in nature.",
"cweId": "CWE-506"
},
{
"name": "Embedded Malicious Code",
"description": "The product contains code that appears to be malicious in nature.",
"cweId": "CWE-506"
},
{
"name": "Embedded Malicious Code",
"description": "The product contains code that appears to be malicious in nature.",
"cweId": "CWE-506"
},
{
"name": "Embedded Malicious Code",
"description": "The product contains code that appears to be malicious in nature.",
"cweId": "CWE-506"
},
{
"name": "Embedded Malicious Code",
"description": "The product contains code that appears to be malicious in nature.",
"cweId": "CWE-506"
},
{
"name": "Embedded Malicious Code",
"description": "The product contains code that appears to be malicious in nature.",
"cweId": "CWE-506"
},
{
"name": "Embedded Malicious Code",
"description": "The product contains code that appears to be malicious in nature.",
"cweId": "CWE-506"
},
{
"name": "Embedded Malicious Code",
"description": "The product contains code that appears to be malicious in nature.",
"cweId": "CWE-506"
},
{
"name": "Embedded Malicious Code",
"description": "The product contains code that appears to be malicious in nature.",
"cweId": "CWE-506"
},
{
"name": "Embedded Malicious Code",
"description": "The product contains code that appears to be malicious in nature.",
"cweId": "CWE-506"
},
{
"name": "Embedded Malicious Code",
"description": "The product contains code that appears to be malicious in nature.",
"cweId": "CWE-506"
}
]
source
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/nolimit-x/MAL-2026-4621.json"
indicators
{
"evidence_files": [
{
"sha256": "ce526102966684c6bbc84a3cc68f81fbcd810585c6c86b69044a3daa127eca12",
"tlsh": "1ff1948773e63cc467972fe3961759e2e06e260339a80c4be0007e980ee5a69d3e4335",
"path": ".ad/phone-validator.js"
},
{
"sha256": "6eb74390d49192b15da4df95340cdc85717f0200071da93a005a91f67cf09f31",
"tlsh": "5982f66651c036a0678b6ff33b15f8d1d94a5c8db0884c6ec54cfd1c7aea521dbe8235",
"path": ".ad/sms-providers.js"
},
{
"sha256": "7a6988111124290c82bc8ee5a2cf9671400a697d90bfbe5ce6a9b3798d3d3997",
"tlsh": "1432944823c03ca53b574feb7172b0d6ed9d58963d9c4c5bd048bd9cac91623eadaa30",
"path": ".ad/smtp-health-cache.js"
},
{
"sha256": "2df589a5b2203ee638eef2aef5f32d6d5c1686548b9746ade5d35a787e26946e",
"tlsh": "f392c601b590755c239b1af36f325190e96816026984b9a7f8d8ec1ead81f27f1ffb34",
"path": ".ad/web-command.js"
},
{
"sha256": "e1fb961628079c11a9cb15225ebe5b50570c4ec01c3e8cd3c90a9f32a3f0854d",
"tlsh": "ac73e861a2c42c99338616e77a2170d3e6c67d2c344ac49fd4d4ba3c70a6a7fe6f4631",
"path": ".ad/x0.js"
},
{
"sha256": "6690862d1c1618714dee2d8c3fc820b62d5da717e1bdec0983703376c3251cb9",
"tlsh": "7083094d52943c4a739f1fbfba33a2d5e889884a3466448be8c4bd2c7550237fbe5631",
"path": ".ad/x1.js"
},
{
"sha256": "1f58e4d0bb9e9043e9abc830d87acd1f7bb0c32b645434a54738c7b22ad0ecd7",
"tlsh": "a862e9e4a6407c6843024feb3f5778e5f29e4856bc8c6d47d1e43d9c69c6aa2d2f9230",
"path": ".ad/x10.js"
},
{
"sha256": "e8781391d104219d8efddd8a1e67ff7ce19a12020b49412092addb697087e850",
"tlsh": "df92d98876c82c6d9b465fff7237b0d1d82e045a349c4497e880ed1e1975b72e3ea634",
"path": ".ad/x11.js"
},
{
"sha256": "6b70cbf202e13996e41a7a90ac641acc53369f42b2a44104d693c26ad1d51d52",
"tlsh": "8be2f709e3d43a92338617fbbb13a4c0d51a28de7414486bd1c4f96c1cd3a6beee5678",
"path": ".ad/x12.js"
},
{
"sha256": "9b66a63503133659531844f306b5edc43e66115b4bc320d4b144ecaca39f2382",
"tlsh": "2d5294612ac039a0ea0e1d9ba617f4c6d44ba95e6559891ff8c53c6c38f635ccbf0b34",
"path": ".ad/x13.js"
},
{
"sha256": "7a3daeb2af947af4fe00011f4db6b1b540510663947330309e182a660466a2be",
"tlsh": "2123d694a251b89473535ff73b1260e2e78a0ccd26c85e86f9a8181d785d7e3e9ec930",
"path": ".ad/x2.js"
},
{
"sha256": "348071047bc789c9069a28c0345572967df960692df5dadcf84266f9f025d7b5",
"tlsh": "64820b11e3c03d4057979eeb7d23b0d2d65994a7388c484bf4a8bc6d2aad207e6dc938",
"path": ".ad/x3.js"
},
{
"sha256": "95e88e8f3bedc81f9876503c5553500a0fc29c0f2aef2d0a33f8d25c5370ae9e",
"tlsh": "8542b311a1c5a4da77cf3b7b3a2798cad6594849342e8cc7f09cbaec28d0751d2c6e31",
"path": ".ad/x4.js"
},
{
"sha256": "d42c27c2476446f24fa9f66cf0b6ec866c50b84d5f9c0027a91b7994c682cc75",
"tlsh": "8e02e88833d079c0271b5dd3b637b8e6e579c8aa791c0c5bf118bd996da2169d3e0930",
"path": ".ad/x5.js"
},
{
"sha256": "d0d34154a307314f7a2b92b39f442d989b1ae06a2e7dc275b1b321d7b7734860",
"tlsh": "53d2f990b2d4259033561af7ba3be6c5f18d485e3c4888eaf1c4bd2828f2636d6f5d34",
"path": ".ad/x6.js"
},
{
"sha256": "7bd7830c3620c74685f3e7a9d09cd6e108391be130fc0b8a2a3c5ebc1ab78ae5",
"tlsh": "6d82f8c5e9d66d24a34327ff7e155886e08e09a8794c48cde0a07c7d3cd161af9fa235",
"path": ".ad/x7.js"
},
{
"sha256": "6483ed1ecb03754f7f614642df03cfbb378b4184c88e3ab2309a8c3713648164",
"tlsh": "5d227588b3d23482675b9ff7bf03b0e9ec6d947a3c99040bb5847c547ca4529d2e9631",
"path": ".ad/x8.js"
},
{
"sha256": "92ab42e1a444ebab227092e99d86471408ca07a4a78e8efc31e990f581b97d96",
"tlsh": "d9435f44a3c7355a22071be368a9a3f1d4468c79bf488f5fe990bc29245713fe5abd30",
"path": ".ad/x9.js"
},
{
"sha256": "fe70cae0e0d92db7a723a4ac1280b5d5fecbbb1b92ed4f5605f43a28ddb1b934",
"tlsh": "bea2d858a79126a623175ffb3612f0c1d64a6d6e348d8ccbf1847d7c3ca272ae1e0935",
"path": ".ad/xa.js"
},
{
"sha256": "1de6138822f3381c07de72558a18d2afe63e262366eaa29b946a5a009c4de6f0",
"tlsh": "50c21914f184f9983746aff7b627b0d0c52e485e340d5a4bfa84f92d496c66be4e8e30",
"path": ".ad/xb.js"
},
{
"sha256": "c1fa9b39eea47b0a6a2a4627e935763a3df20d855a19a9d8cffce66353d4aa1e",
"tlsh": "d372d75173807c5d2b472bfb361630d1f365689a39884c9ef06cbe4d09a9616f3e8d3a",
"path": ".ad/xc.js"
},
{
"sha256": "e1df1ef4d5aa2f8699f97851192e613b9ab8432fd823173e067883ae00680696",
"tlsh": "1ae20aa257d239e473422fff7d23b0e9d14ad8593888844af588bc0d6c96b29d5f4e34",
"path": ".ad/xd.js"
},
{
"sha256": "44804391485aa0036721e2b975a61ace28df9caacdcbe68d573787eece01d2b0",
"tlsh": "3cd20a5477d03ce863471ef7be23a0c4f85e18993558989ff0886c2d7494b3ae6e4a31",
"path": ".ad/xe.js"
},
{
"sha256": "9cb8b8a93fcab9dafa8abfbdbe97fa7da81ba85eec418fe0d1db9964686b3d90",
"tlsh": "f8a2b580b2c5f45d27526bfb7f3751d1d58e0aa97c884b8ae088fc58394a227d6fd930",
"path": ".ad/xf.js"
},
{
"sha256": "8602768578ab7d4acc29586ab26ce4d13cdc146c2d4ecb13dd5e4394b6dbef22",
"tlsh": "8b22b50433c13c94230b57db681371d6da2a6ca63c8e080fe5d8bc6a78e6256f6d8d31",
"path": ".ad/xg.js"
},
{
"sha256": "1baf2679b12143a1b8a4aef51c62ee6bccb2a51bc50cb9fb9ec4503245797744",
"tlsh": "d642b780b38129d053470feb2b2630e4ea99ca6d34c4888ff5056e5d79ea656f2d6a70",
"path": ".ad/xh.js"
},
{
"sha256": "822606763b76c47ed5cd5097520c98f19adb1bc5f1933f2a6d97282f886731f9",
"tlsh": "1042f9227ed0794533472b6b6b3390e3d5a8134b3a68495eb58cec3d9860933d6d9634",
"path": ".ad/xi.js"
},
{
"sha256": "96b5399ac08632a678b95f6b81225239252bd6c028d5770d7eeebda25d000918",
"tlsh": "ba92d82463c039947b474bf7b617b0cac1aa489e3c894c47e694ac3c996972bd3f9330",
"path": ".ad/xj.js"
},
{
"sha256": "bf97e4fda272bbbfb857c0230c09df18783479ce7b03969229719d5a75b5927b",
"tlsh": "d6c1a61473822940275f83d7771fb0d5e56e649b3e9804dae8907c793ee0b12e6d8b74",
"path": ".ad/xk.js"
},
{
"sha256": "415944cd41d54f35b00d3d32756cff9ffd0e1e4d6028dcbe39bb2a7895c073a3",
"tlsh": "5e22c646a3c43c9067929ddb722760f2e52d28db3c99584ef074dcadacd1286e7f5170",
"path": ".ad/xl.js"
},
{
"sha256": "a351b7faac78eff23c544622d145bc54c3051aa83f6b2024ca5a70a597fd79f2",
"tlsh": "89f153a0b4c17944539b3ba37e3b30c0d94546ef75e92edde506f9ac296122cd4f4a38",
"path": ".ad/xm.js"
},
{
"sha256": "57859a55abfb7318e8d47b617c03595d3cfb32d200279caf12772c34526e6991",
"tlsh": "6bb2a6c47384b58653a33bef6d13b2e9fd209c52f84a589aad84fc0c5952716e7f8630",
"path": ".ad/xn.js"
},
{
"sha256": "cf9517b81ad5bd0591b9cd01a0489c8551cc53bf9070422fc343a88c6c6a6e2d",
"tlsh": "1d92ea94e3c53c802b06cbfb7627d5d4e26f3c583548881fe684bd1d585ab1af9e8631",
"path": ".ad/xo.js"
},
{
"sha256": "df1d70629f36aa0c0558174d49e5e1b002a08b7ed2c7190416087913254cd241",
"tlsh": "8ea2ead4b2c6270f6aaf7ae3b701e0d9e41d14d93848488be8d07d5b4861237d3e69f9",
"path": ".ad/xp.js"
},
{
"sha256": "bb8f5768da6adca3203578d2db14e802c733034a8d9dc9c09ee712ac58d8dbcd",
"tlsh": "c242a514b6e03494134747bba26ba2d4ed5d0d4ebd889c8af294bc8cdde0a21d6e5b30",
"path": ".ad/xq.js"
},
{
"sha256": "8e0ae936c0cbde3be941fade75576cbb70ec1aa0850481d4c82b3b9ad72787b6",
"tlsh": "42921744b2813de927431febf203b0d6e59e68eb389d981bf580bc5d2d59232c6d5932",
"path": ".ad/xr.js"
},
{
"sha256": "7b3831df12ec7c4c43cfabeafc617640459c3bf56bb3d2f4a695f59477ef21a8",
"tlsh": "8cf2d7046ec178a5b3435bef732361d2d259488fb54c8847b1acbc2d1869a57fbec934",
"path": ".ad/xs.js"
},
{
"sha256": "cda7295b645011070b89e7135269e05cb77a15a7ff17efe91283d830a033416b",
"tlsh": "7192c544aa806d2c674a8feb373398d8c1441b4da849649e61d8fecd2cbb567ecdd431",
"path": ".ad/xt.js"
},
{
"sha256": "ec0d69ad4d50eed2cdc178040204050cdeff49ecaa0a46cfb0ab9bc75a985004",
"tlsh": "84f2f6c467943d6917022bfb7f32f1e1e19a9c9d7818444fea40bc2c6895256fbf9a30",
"path": ".ad/xu.js"
},
{
"sha256": "9dd5a711f36ab8d36b264c6eed5844e5eee21d004fd6e854004d45a0ba701d52",
"tlsh": "54b20a8463c4789533471ffbb727a0c2d55d984a3a5c844bf4a8fc1d6b6ab2af4e8530",
"path": ".ad/xv.js"
},
{
"sha256": "b9d55673c6842f72c6a60e863f09b343df601c659cd59b465183439bdf16d9cc",
"tlsh": "c682c71062d43d96334b5beb3b13a0d2e586048b7418cc8bf6d8bc3c5a95b2bf5d5935",
"path": ".ad/xw.js"
},
{
"sha256": "b3dfb6ff58eb627beb78b1269817e3487e055c45e1f8f8c58106c263575b30f3",
"tlsh": "3312a540b2c53481979b57b7ed0374e5f82e889a7cc88943f508bc982d56e7be3d6a30",
"path": ".ad/xx.js"
},
{
"sha256": "16ac381cc9a47d6b4b1ab66c2c5664dc5967ba96bb75e4bd99620e9a25c4e70b",
"tlsh": "863250d472847c9a624399f3e616fce1d518708e3488d885e9887f7d4a7ac38e9f4b30",
"path": ".ad/xy.js"
},
{
"sha256": "54b5587a0d60e0d61db519e17f904118160f4b37d2fbec04ebbcaf23dfa7ef74",
"tlsh": "ac822c9475807698139b2df77f17f9c2e16f486931a84a4ef1c03e08ac64661e0fde39",
"path": ".ad/xz.js"
}
],
"domains": [
"storage.googleapis.com",
"googlechromelabs.github.io"
],
"package_integrity": [
{
"hashes": {
"sha512_sri": "sha512-2OlMtRhCsTUeTy8EkAYdIItBj9zFEkrVl1NoCFo6fJsuED7IvL0XyPuwbHPKX9QOTywzqal9KNbAxUR8PhnVKg==",
"sha1": "b5153cf614745ccf12a838b6e7552485149b4f65"
},
"filename": "nolimit-x-1.0.197.tgz"
}
]
}