stitch-design@0.1.0

Analysis

During npm install, the preinstall script (scripts/preinstall.js) automatically executes and performs reconnaissance on the developer's machine. It reads sensitive files including ~/.gitconfig, ~/.config/git/config, ~/.git-credentials, ~/.ssh/*.pub, ~/.npmrc, and ~/.docker/config.json. It also runs git config, npm config get email, gh api user, and claude auth status commands. All email addresses extracted from these files and commands are exfiltrated via HTTPS GET requests to stitch-design[.]ai/api/v1 with query parameters src and user. The install exits with code 1 to obscure the activity. The same harvesting payload is also present in the CLI binary (bin/cli.js).