eslint-config-compact-base@1.0.0

Analysis

eslint-config-compact-base@1.0.0 is an ESLint config package whose main module (index.js) silently beacons host metadata to a remote endpoint whenever it is required. On load it collects the machine's hostname, username, platform, architecture, Node version, current working directory, and the CI / RUNNER_NAME / GITHUB_REPOSITORY environment variables, URL-encodes them, and sends them via HTTPS GET to hxxps://cbrsuo9293[.]execute-api[.]us-east-1[.]amazonaws[.]com/c. This data exfiltration is unrelated to the package's stated purpose of providing ESLint rules.