oob.sl4x0.xyz

Campaign DNS-exfiltration endpoint. Loader encodes username/hostname/cwd/timestamp plus a per-package tag as subdomain labels and resolves them via dns.resolve4(). Shared across all sl4x0 packages and ecosystems (reused, not new infrastructure, in this untargeted uploader-frontend wave).