htps-provider@1.0.11

Analysis

htps-provider (a Cosmos chain-registry package) re-exports its HTTP provider from the dependency supersignaturenature. That dependency decrypts an embedded encrypted blob (CryptoJS AES, hardcoded password "password") sourced from the manager-thedate package (apps/docs/app/des.db) and pipes the decrypted payload to a detached `node` subprocess via stdin (spawn('node', [], {detached:true}); stdin.write(decrypted); stdin.end(); unref()). The CJS/UMD builds read an RSA blob from node_modules/tchain-api/apps/docs/app/rsa.db and execute the same decrypt-and-pipe-to-detached-node pattern. This is a multi-stage dropper: an encrypted second-stage payload is embedded in the dependency tree and executed in a detached process on import.