csv-parser-helper@1.0.0

Analysis

The package csv-parser-helper@1.0.0 is a combosquat of common CSV parsing utility names. Its postinstall hook executes postinstall.js, which collects extensive system and CI/CD environment metadata — hostname, username, working directory, OS details, container/docker detection, process tree, GitHub CI variables (GITHUB_REPOSITORY, GITHUB_ACTOR, GITHUB_RUN_ID, CI, RUNNER_NAME), IP addresses, DNS configuration, cloud metadata probes (Tencent Cloud and AWS metadata endpoints), and the full environment — then base64-encodes the collected data and exfiltrates it via an HTTP GET request to the OAST callback domain pzs5w7ntzhsnepwk564lyfdci3oucl0a[.]oastify[.]com at path /z with the encoded data as the d parameter.