@quantixfinance/supabase@1.0.0

Analysis

The preinstall hook (preinstall.js) runs on install and harvests the installer's environment: it collects every environment variable whose name contains key, secret, token, pass, supabase, url, private, mnemonic, seed, database, api, deploy, wallet, tron, contract, vercel, railway, rpc, infura, alchemy, quicknode, ankr, or env, along with the hostname, working directory, and Node version, and POSTs the collected data as JSON to a remote endpoint (host encoded as integer 759017974, port 61289, path /0471e9cef36a6718b0f2bfdbec06bd82/47acfe667ff0162697f4af03/54c960d45ce346f9/r). Errors are silently swallowed.