file_path

require(_0x45af03['GyrZN'])

discovered 2026-06-23

Dynamically-obscured require with an identical variable name (_0x45af03) and proxy key (GyrZN) across most campaign payload blobs. Resolves a Node built-in module name from a decrypted RC4 string at runtime to keep it out of the static module graph. Cross-package code fingerprint.

Campaigns

Linked packages

Read the full analysis →