De-obfuscated payload from the September 8 2025 npm supply chain attack - View it on GitHub