[imankulov]

You can actually test it yourself. The actual URL is in the post and the website is still up.

[mfkp]

Seems like it actually loads a PNG image now, maybe the npm script adds some additional headers to trigger the payload.