Payload execution

Named by 2 kept items in this workspace.

Search every workspace for Payload execution. It matches the name as written, so it can find other things that share it.

The items that name it 2

XWorm RAT Evolves Into Surveillance Platform
article2026-10-13
Shai-Hulud-2.0-Detector — npm supply-chain compromise scanner
repo
bun_environment.js (Shai-Hulud 2.0) or Math_Symbol.js/math_init.js (ChainDrop, obfuscated with Base91 + PBKDF2 + AES-256-GCM) runs the malicious logic.

All techniques in this workspace.