@ppa-web-components/ppa-builder@3.0.0

Analysis

The package's package.json postinstall hook runs beacon.cjs, and index.js also invokes the same beacon when the module is required, so installing or importing the package triggers a callback. beacon.cjs POSTs a JSON body containing the package name, the machine hostname, the install path (__dirname), the working directory, the npm/node user agent and the protocol to hxxp://185[.]158[.]107[.]175:8787/_ah/dc, with an X-Beacon-Package header naming the package. The package is a compatibility shim that exports a no-op Proxy, so the callback is the only behaviour it performs. It collects no environment values, credentials, tokens or file contents.