layerd-unit-codec-parser@1.0.0

Analysis

The package ships a 13KB AES-GCM-encrypted payload in src/config/defaults.js as a hardcoded string (DEFAULT_FINAL_ENCODED_TEXT). It exposes a run() method that decrypts this payload using AES-GCM and executes the decrypted code via the Function constructor with the Node.js require function injected as an argument (new Function("require", runnable)(require)), giving the decoded payload full access to read the filesystem, environment variables, network, and child processes. The payload is triggered by running start, decode, test:cjs, or example scripts, or by requiring the package and calling run(). The README describes a different package (postcss-minify-selector-parser) than the published package name, indicating a fake cover identity. The actual contents of the AES-encrypted second-stage payload are unknown without the passphrase, but the delivery mechanism is consistent with credential-theft and backdoor implant patterns observed in prior npm supply-chain attacks.