@blueskydataplatform/shared-ui@0.0.1

Analysis

This package is a dependency-confusion style install-time beacon. Its postinstall hook runs beacon.cjs, and index.js fires the same beacon whenever the module is imported (it exports a no-op Proxy so importing code does not crash). beacon.cjs POSTs a JSON body containing the package name, the machine hostname, the install directory (__dirname), the working directory and the Node version to hxxp://185[.]158[.]107[.]175:8787/_ah/dc with an x-beacon-package header. The package contains no environment-variable access, no credential or token reads, no file reads and no remote code execution; its only behaviour is the host-metadata callback. The README self-describes the package as an authorized dependency-confusion test.