discovered 2026-07-14
Shared PyInstaller (Python 3.13) second-stage host-surveillance payload dropped by all 11 downloaders.
