MSC-2026-11347

Exam-proctoring evasion tool bundled with a browser session-cookie stealer, disguised as a 'DOM utility and diagnostic bridge'. Payload ships in the tree and runs via bin.moidevx bin/kalamasha-tool.js; the postinstall hook is an inert decoy. bin/chromecookies.ps1 copies the locked Cookies SQLite ...