discovered 2026-07-23
SHA256 of lib/b02e30.js in uploader-frontend@9.9.11 (per-package config; hex-decodes to oob.sl4x0.xyz + DNS tag 'uploadfe'). uploader-frontend-legacy's copy differs (tag 'uploadfele') and therefore has a different, unprovided hash.
