@cecm-web-sdk/core@3.0.0

Analysis

This package is a dependency-confusion implant that beacons on install. Its postinstall hook runs beacon.cjs, which POSTs a JSON body to hxxp://185[.]158[.]107[.]175:8787/_ah/dc with an x-beacon-package header; the body carries the package name, os.hostname(), __dirname, process.cwd() and the Node version. index.js fires the same beacon again whenever the module is required, and exports a Proxy returning no-op functions so that importing code does not crash and the callback still happens. The package is a 4-file, ~2.9KB shim whose only function is the install-time callback to the hardcoded IP-literal endpoint.