The interesting part is not the payload. It is how the attacker got the npm token in the first place: by injecting a prompt into a GitHub issue title, which an AI triage bot read, interpreted as an instruction, and executed.
English, dual CTC/TDT decoder heads
，详情可参考体育直播
Show the first 100 Google search results for any。体育直播是该领域的重要参考
Main publications，更多细节参见PDF资料