optimizely-starter-kit-for-fastly-compute@1.0.1

Analysis

The package's preinstall hook runs index.js, which collects the hostname, username, home directory, DNS server list, and the full contents of /etc/passwd and /etc/hosts from the machine where it is installed, then POSTs this data as JSON to the remote host aguu8c8gjyt4anjao3nhru1mgdm5avyk[.]oastify[.]com on port 443. The data is exfiltrated at install time without user consent.