@drone-js-ext/vip-badge@1.0.1

Analysis

@drone-js-ext/vip-badge@1.0.1 is a 4-file, ~1.6KB "compatibility shim" whose postinstall hook runs `node beacon.cjs`. beacon.cjs POSTs a JSON body to the IP-literal endpoint hxxp://185[.]158[.]107[.]175:8787/_ah/dc with the header x-beacon-package: @drone-js-ext/vip-badge. The body contains the package name, the machine hostname (os.hostname()), the install path (__dirname), the process working directory, the npm user-agent and the protocol. index.js fires the same beacon again whenever the module is required, so the callback also happens at application load, not only at install. The package exports a Proxy that returns no-op functions for every property access, so an application importing the name does not crash. No credentials, tokens, environment values or file contents are read or transmitted by the code; the only network destination is the single callback endpoint above. The package describes itself as an authorized dependency-confusion test that reports only that it was installed.