environment-gate@7.3.6

Analysis

Package environment-gate exports a gate() function that fetches JavaScript code from hxxps://www[.]jsonkeeper[.]com/b/VKUNI and executes it via eval(). The remote URL is base64-encoded using atob() inside the function body. When called at runtime, gate() downloads and runs attacker-controlled content from the jsonkeeper[.]com host, enabling arbitrary remote code execution. The prior version (7.3.5) carried a commented-out copy of the same payload, which was activated in 7.3.6.