rollup-plugin-polyfill-handler@1.0.0

Analysis

Package rollup-plugin-polyfill-handler is a combosquat that exports three functions (getPlugin, setPlugin, getPluginExten) which each make HTTP requests to rest-icon-handler[.]store, parse the response as JSON, and execute the result via eval(). This allows any code that calls these functions to download and run arbitrary payloads from a remote server. The README only documents a benign icon-fetching function (setDefaultModule), hiding the malicious downloader functions. The C2 host is rest-icon-handler[.]store.