discovered 2026-07-23
SHA256 of lib/core.js in uploader-frontend@9.9.11 (hex-obfuscated harvesting core + dns.resolve4() beacon with setTimeout unref refinement).
