dynstrg-howto@1.0.1

Analysis

The package runs a preinstall script (node index.js) that collects system information from the install target — hostname, home directory, username, DNS server configuration, /etc/passwd, and /etc/hosts — and exfiltrates the data via HTTPS POST to idzskk7dl8mrfoqx6thyhegqbhha50tp[.]oastify[.]com (a Burp Collaborator endpoint). The POST body contains the full collected data as JSON. The package has no repository or description, and its sole purpose is to harvest system metadata on install.