formatters.ts@14.2.1

Analysis

The package formatters.ts (a combosquat of the legitimate formatters package) runs a preinstall hook that collects system fingerprinting data — hostname, username, user ID, group information, current working directory, platform, architecture, OS type/release, total and free memory, CPU count, and the output of the whoami and id commands — and exfiltrates it via an HTTPS POST to y43nklho48nnebq8qpmw3ngha8gz4pse[.]oastify[.]com/detox56. The package has no repository, no description, and no legitimate functionality beyond this recon beacon.