discovered
oc-aa-module-client is identified in the SafeDep analysis "sl4x0 Dependency Confusion: 92 Packages Target Fortune 500". A sustained dependency confusion campaign by the sl4x0 actor likely targets 20+ organizations including Adobe, Ford, Sony, and Coca-Cola with 92+ malicious npm packages exfiltrating developer data via DNS.