@klapp-sca/routes@99.0.1

Analysis

@klapp-sca/routes@99.0.1 is a dependency-confusion stub whose preinstall hook (node index.js || true) runs index.js to exfiltrate host metadata. It harvests hostname, username, directory and cwd, hex-encodes the data, and leaks it via two channels: a DNS query to the callback domain oast[.]live and an HTTP POST to 172[.]201[.]213[.]59:9090. Errors are silently swallowed.