originaldevelopmentstelemetry@1.2.2

Analysis

The package is a remote-code downloader/loader. Its exported function fetches a remote .hta file from hxxps://raw[.]githubusercontent[.]com/$Acevatex/Testprogram/main/updater[.]hta, writes it to the system temp directory, and executes it via mshta (Windows HTML Application host) as a detached, hidden background process. The downloaded .hta content is attacker-controlled and runs arbitrary script on the host. The package's stated purpose is to download and run this remote client.