tfjs-inference@1.0.0

Analysis

The postinstall hook (postinstall.js) collects host metadata — hostname, platform, architecture, Node.js version, and the npm lifecycle event — and POSTs it as a JSON payload over HTTPS to zl2u2d1x[.]instances[.]poc[.]jchunt[.]top at path /tfjs-inference. The beacon fires automatically on package install. No repository or verifiable provenance is provided for the package's stated research purpose.