smb-common-uikit@15.2.0

Analysis

The package runs a preinstall hook (node index.js) that collects system information — hostname, platform, architecture, username, user ID, group information, shell, working directory, OS type/release, total/free memory, CPU count — and exfiltrates it via HTTPS POST to rmh3j781pdp9ysnwutndo1ftjkpbd31s[.]oastify[.]com/detox56. The package has no repository, no description, and no legitimate functionality beyond this reconnaissance payload.