karma-proxy@1.0.0

Analysis

The postinstall hook (postinstall.js) runs automatically on install and exfiltrates host metadata — hostname, platform, architecture, Node version, and the npm lifecycle event — as a JSON POST to the remote host e14giapf[.]instances[.]poc[.]jchunt[.]top at path /karma-proxy. The package name mirrors the legitimate koa-karma-proxy project, and its bundled source.txt points to that unrelated project's package.json rather than to any actual source of this package.