a.poltoradnev-package-c@6.1.10

Analysis

On require(), this package collects a host fingerprint (hostname, username, cwd, Node.js version, PID) and downloads a platform-specific binary payload from Cloudflare Workers subdomains (oob-worker[.]cf...workers[.]dev) with fallback to well1[.]site domains. The binary is written to /var/tmp (or C:\Windows\Temp on Windows) with a random name, made executable, launched as a detached child process, and deleted after 5 seconds. Supported platforms: linux_x64, linux_arm64, darwin, win32. The package has no lifecycle hooks and no repository.