timed-assess@1.0.0

Analysis

timed-assess@1.0.0 runs a hidden payload at install. The postinstall hook executes `node apps`, which loads apps/index.js: this reads a bundled file, decrypts it with the hardcoded DES password 'bf497c0b9cee', and pipes the decrypted content into a detached background `node` process (spawn with detached:true, unref) that executes it. The package is presented as a proctoring/assessment tool but its install-time behaviour is decrypt-and-execute of an encrypted blob in a process that outlives the installer. The encrypted payload file is bundled under the package (referenced as public/logo.ico).