SHA-256 hash of malicious root-level index.js in @immobiliarelabs/[email protected]; Caesar-shift loader with AES-128-GCM decryption for multi-stage payload delivery
