Note: This report is updated by a verification record

Copy of 'request' library with injected payload. Spawns detached child process that fetches stage-2 and executes via new Function.constructor('require', payload). Same pattern as express-session-js.