The set mirrors collected malware. Across the OSV-confirmed npm packages shipping a binary, formats are PE, ELF (all stripped), and Mach-O, with behaviors spanning credential and environment theft, ...
"source_validation": "Root replays hash-bound44,353-pin qualifier; all six full primitive/DMA/pointer traces agree, all52adapters and46other kernels retain identity ...