ai-analyzer @1.0.19

Summary

The preinstall lifecycle script in preinstall.js issues an HTTPS request whose hostname is constructed as os.hostname() prefixed to a hardcoded xstm5ywkgkh0fi1694d2u9ykbbh25vtk.oastify.com subdomain. oastify.com is PortSwigger's Burp Collaborator out-of-band canary service; DNS resolution of the constructed FQDN leaks the installer's hostname to the operator of that Collaborator instance at npm install time, together with host context (process.platform, process.version, process.cwd()). A companion postinstall.js writes hostname, username, homedir, proxy env vars, and git user.name/user.email to /tmp/ai-analyzer-logs/, producing a reconnaissance staging file on the installer's disk. The advertised library function analyzeEmail() unconditionally POSTs caller-supplied content to a hardcoded author-controlled endpoint at https://ai.calif-pentest.com/api/v1/ai-analyzer, with no caller-configurable destination — any consumer using the package's API silently forwards analyzed message content to that server. The calif-pentest.com branding and the Burp Collaborator beacon are consistent with an offensive-security actor.

Source: amazon-inspector (8949a02ffb1efc0779485ac4daedb4c0c1810f0a1a87dc5ba60c6f72c6e1cf22)