@hibachi-xyz/common@99.0.0

Analysis

@hibachi-xyz/common@99.0.0 is a dependency-confusion credential harvester. On require(), it enumerates all environment variables, filtering for those matching credential-related patterns (KEY, SECRET, TOKEN, PASS, PRIV, SIGN, AWS, GITHUB, NPM, DOCKER, KUBE, CF_ and others), collects the hostname, username, and container cgroup information, then exfiltrates the data as a JSON POST to jorijo[.]xyz:8443/t over HTTPS with certificate validation disabled and errors silently suppressed. The package has no repository, no lifecycle hooks, and uses version 99.0.0 to exploit dependency-confusion against internal @hibachi/* scoped packages.