ServiceWorker's Link leads to botnet-like persistent JavaScript worker (opens in new tab)

You can see what service workers are registered here:

chrome://serviceworker-internals/

Frankly, I'm tempted to label the whole notion of a remote-installing auto-updating local proxy as a misguided antifeature, but I honestly don't know enough about it. What was wrong with app caching?

Hm. This seems difficult to prevent without really preventing a lot of valid use cases.

See https://truefactor.io/catworker for botnet admin page

Wheres the source for this?