cache-section-helper@1.0.7

Analysis

cache-section-helper@1.0.7 is a two-stage downloader disguised as a webpack caching plugin. Its postinstall hook runs loader.js, which writes a dropper to a temp file and spawns it as a detached background process (detached:true, .unref()) so it survives npm exit. The dropper hex-decodes hxxps://jsonkeeper[.]com/b/L435A, fetches that URL over HTTPS, parses the response as JSON, and require()s the content as code — a remote-code-execution payload dropper rather than a caching utility.