livekit-agents@0.3.4

Analysis

The install hook (postinstall: node dist/postinstall.js) collects system information — package name and version, Node.js version, OS platform and architecture, the installer's username, hostname, and current working directory — and sends it via HTTPS POST to livekit-agents[.]xyz:443/api/metrics. The beacon silently suppresses errors and timeouts to avoid detection. The package also declares a self-dependency (livekit-agents@^0.3.1), a known bootstrapping technique.