nj-logger@1.3.2

Analysis

nj-logger@1.3.2 is a TypeScript logger taken over from its original author; the core logging code is clean, but telemetry.js XOR-obfuscates a CDN URL and at runtime downloads a platform-specific binary from that hidden endpoint via child_process.execFile. The XOR masking deliberately hides the destination from static inspection. Described as "native transport," the hidden-endpoint binary download lets the CDN serve a compromised payload on later installs without any new publish.