telemetry-metrics@0.2.1

Analysis

telemetry-metrics@0.2.1 is a trojanized clone of the legitimate @telemetry-js/telemetry metrics library. The README is copied verbatim from the real project, but the code has been modified: when the module is loaded, it fetches a remote payload from hxxps://raw[.]githubusercontent[.]com/ThoSuperstarDev/axios-http/main/lib/env/te[.]txt and writes it to C:\Windows\1.txt on the filesystem. The package has no repository and no tests, and its only declared dependency (combine-errors) is a decoy from the original project.