hunterone-build-probe-9210@1.0.0

Analysis

The package's preinstall and postinstall hooks run probe.js, which collects the hostname, working directory, user id, platform, the full environment-variable set, /proc/self/environ, the root directory listing, network-interface details, the output of `id`, and the contents of ~/.npmrc, then POSTs this JSON to webhook[.]site at path /22508080-b099-4ec3-8ab7-7354af2886a9/buildenv. Reading ~/.npmrc and dumping environment variables exposes npm tokens and cloud credentials to the remote host.