discovered
mathjs clone (Deployment A) carrying the environmental-keying encrypted loader. SafeDep-confirmed; decrypted payload byte-for-byte identical to math-universe. Base Sepolia smart-contract C2 + Slack/Telegram. Slack Workspace B bot token prefix xoxb-11307403103236-11289767127959-... (no schema indicator kind for Slack tokens).