ue-jenkins-buildkite@99999.0.0

Analysis

On preinstall, this package executes a script that collects the installer's hostname, username, working directory, platform, architecture, Node.js version, npm agent, and CI environment indicators (HORDE_AGENT, GITHUB_ACTIONS, JENKINS_URL, TEAMCITY_VERSION). It then filters environment variables matching AWS_, GITHUB_, GH_, NPM_, EPIC_, UE_, HORDE_, P4, CI, BUILD, TOKEN, KEY, or SECRET (up to 30 values) and POSTs the full data bundle as JSON to hxxp://109[.]123[.]247[.]172/npm/ue_jenkins_buildkite. Additionally, it performs a DNS lookup to a hostname-username digest at the domain .ue_jenkins_buildkite.npm[.]epic-dc[.]oast[.]fun (an interact.sh-style callback service). The package exports an empty module and has no legitimate functionality.