discovered 2026-06-24
Decrypted Bun bootstrapper (_b blob), identical across all 20 LeoPlatform infected packages