estore-client@5.0.0

Analysis

estore-client@5.0.0 is a malicious package containing only a package.json with no actual source code. The preinstall, test, and preupdate lifecycle hooks all execute `wget` to exfiltrate system information (current username, working directory path, and hostname) to webhook[.]site/d32804ac-1bbb-4100-ab60-95231dd3251c/ via query parameters. The package also declares a dependency on seaport-core-16, a known malicious package. The package has no repository URL, no description, and ships no functional code.