markdown-editable-table@2.4.2

Analysis

Combosquat of the legitimate markdown-table package. The preinstall hook (index.d.js) decodes a base64 payload that fetches a remote script from everydaynodechecker-39143n[.]vercel[.]app/api/key?mem=root1 and evals it, enabling arbitrary remote code execution on every npm install. The package has no repository, no tests, and the legitimate code in index.js is a verbatim copy of the real markdown-table library.