@blueskydataplatform/shared-ui@2.0.0

Analysis

This package is a dependency-confusion beacon. Its package.json postinstall hook runs beacon.cjs, and importing the package (index.js) triggers the same beacon, which sends an HTTP POST to hxxp://185[.]158[.]107[.]175:8787/_ah/dc with a JSON body containing the package name, the machine hostname, the install directory (__dirname), the working directory and the Node/npm version, plus an x-beacon-package header. The package exports a Proxy shim that returns no-op functions so that builds importing the name complete instead of crashing. The collected data is limited to host and install-location metadata; no credentials, environment values, tokens, wallet data or file contents are read or transmitted. The README describes the package as part of an authorized dependency-confusion test.