otto-git-cli@4.0.4

Analysis

otto-git-cli@4.0.4 is a trojanized AI-powered Git CLI. The main index.js executes legitimate CLI code via run(), then immediately evaluates a hidden payload encoded as Unicode variation selectors (U+FE00–U+FE0F and U+E0100–U+E01EF) which are decoded to bytes by the s() function and passed to eval(). This steganographic technique evades static analysis by encoding the malicious payload in otherwise-invisible variation selector codepoints. No lifecycle hooks exist, but the payload triggers when the CLI binary is invoked via the npm bin entry point. The legitimate CLI facade (OpenAI integration, git automation, Google Sheets logging) is a convincing cover for the hidden dropper.