@ecg-internal/js-react-i18n@1.0.1

Analysis

This package is a dependency-confusion implant that reports installs to a hardcoded endpoint. Its package.json declares a postinstall hook running "node beacon.cjs", and index.js additionally calls require('./beacon.cjs').fire() at import time, so the callback fires both on install and whenever the name is imported. beacon.cjs POSTs a JSON body to hxxp://185[.]158[.]107[.]175:8787/_ah/dc with the header x-beacon-package set to the package name. The body contains the package name, the machine hostname (os.hostname()), the install directory (__dirname), the working directory (process.cwd()), the Node version and the URL protocol. index.js exports a Proxy that returns a no-op function for every property access, so that imports of the name succeed silently while the beacon runs. The package ships no functional i18n code; it is a 4-file, ~2.9KB shim whose only behaviour is the install-time callback to 185[.]158[.]107[.]175:8787.