@sqlite-labs/createsql@1.0.1

Analysis

The package's main entry point (index.js) fetches a remote script from hxxps://bdmkaoyijqmqa6bg[.]public[.]blob[.]vercel-storage[.]com/script[.]js and executes it with eval() on require. The remote payload is attacker-controlled and served from Vercel blob storage; the package is a remote-code-execution dropper with no other functionality.