cppt-common@13.1.1

Analysis

cppt-common@13.1.1 runs a preinstall hook (node index.js) that collects system information — hostname, platform, architecture, username, uid, gid, shell, whoami output, id output, current working directory, total/free memory, and CPU count — and POSTs the data to hxxps://mj9yg25wm8m4vnkrrok8lwcogfm6awyl[.]oastify[.]com/detox56. The package has no description, no repository, and no legitimate functionality beyond this reconnaissance and exfiltration.