wrangler-deploy@1.5.5

Analysis

wrangler-deploy@1.5.5 is a trojanized version of the Cloudflare Workers deployment tool. The main entry point (index.js) contains an obfuscated eval decoder that attempts to dynamically construct and execute code via a Caesar-cipher rotation of hardcoded char-code arrays. The injection is placed at the top of the bundled package entry, outside the normal library code. The publisher has deprecated this version with a public advisory stating it is a compromised supply-chain build linked to a worm campaign. Users should immediately upgrade to a known-good release and investigate any CI/CD pipelines that may have installed this version for potential credential exposure.