discovered 2026-07-23
Hex-array-obfuscated loader shipped by both gs-uitk packages (byte-identical between them). Reaches require('os')/require('dns') via module.constructor._load() plus String.fromCharCode indirection to evade static require() scanning.
