cookie-js-ease@2.1.7

Analysis

Combosquat clone of js-cookie. The CJS build (dist/cookie.ease.js) contains an injected block: when loaded in Node.js (typeof document === 'undefined'), it uses axios to fetch content from hxxps://cookie-api-two[.]vercel[.]app/ and evals the response, enabling arbitrary remote code execution on require(). The MJS and minified builds are clean — the payload is Node.js-specific.