discovered 2026-09-18
Attacker source repo for mathsbase; the loader is in the npm build only, not this GitHub source (commit 560d97e66140dbf817e04284a7a0c58757d1202e).
