msc-terminal@3.2.0

Analysis

The package's install hook executes a bundled script that re-spawns itself as a detached, output-suppressed process for persistence and evasion. It ships an 836KB heavily obfuscated payload (dictionary-array obfuscation, base64 decoding via atob) that uses child_process and fetch for command execution and network exfiltration.