@veertly/web-app@99.9.9

Analysis

Dependency-confusion stub: @veertly/web-app uses a high sentinel version (99.9.9), a scoped name mimicking a real service, and a tiny (1010-byte) tarball. A preinstall hook runs index.js, which collects os.userInfo().username, os.hostname(), and the current working directory, then beacons them to api[.]telegram[.]org/bot8775202566:.../sendMessage with chat_id=1483949647. The error handler is deliberately silent to avoid surfacing failures. Outbound telemetry exfil to an external API at install time.