file_path

._t-in-one_init.js

Second-stage dropper written to the OS temp directory (os.tmpdir()) by the Wave 2 postinstall hook, then spawned detached. Follows the same ._<scope>_init.js naming pattern as Wave 1's ._cloudplatform-single-spa_init.js.

discovered 2026-05-29

Campaigns

Linked packages

Read the full analysis →