real-router-telemetry@1.0.1

Analysis

The package ships a telemetry module (telemetry.js) that fingerprints the host and exfiltrates data to a remote server. On execution it collects the hostname, current username, working directory, platform, architecture, total memory, CPU count, reads the contents of the .env file, and runs 'cat /etc/os-release' and 'ps aux --no-headers | head -20' to gather OS and process information. All collected data, including the .env file contents, is serialized to JSON and POSTed over HTTPS to real-router[.]duckdns[.]org/collect on port 443. The .env read means environment/credential file contents are sent to the remote host.