relativity-pdfjs-dist@99.9.9

Analysis

relativity-pdfjs-dist@99.9.9 is a combosquat of the legitimate pdfjs-dist package. The preinstall hook runs an inline script that collects hostname, username, current working directory, npm registry URL, CI/CD environment variables (CI, GITHUB_REPOSITORY, JENKINS_URL), and platform information, then exfiltrates this data via an HTTPS GET request to 9u4hlcu3febavvzbrqulpuwf66cy0qof[.]oastify[.]com. The package contains only a package.json and an empty index.js stub — no actual PDF.js functionality.