discovered 2026-07-11
dist/setup.js preinstall dropper script. Byte-identical across 8.14.0, 8.16.0, and 8.17.0. Reads the binary container, decompresses platform-matched payload, spawns detached.