@sgtestuj/ssscreen@1.0.0

Analysis

This package bundles a copy of the html2canvas library and exposes a side-effect module (referenced via the exports map) that captures a full-page screenshot of whichever webpage it is loaded on and exfiltrates it. When the secondary export is imported, it dynamically creates a script tag loading html2canvas from cdnjs[.]cloudflare[.]com, then on load calls html2canvas(document.body) to capture the page, converts it to a base64 PNG via canvas.toDataURL("image/png"), and POSTs the base64-encoded screenshot data to the remote endpoint hxxps://c171[.]testarmy[.]com[.]pl/screen[.]php. IOCs: exfiltration target c171[.]testarmy[.]com[.]pl, path /screen.php.