blastradar @1.0.0

Summary

The package's index.js loads child_process, https, and fs at the top level and performs an HTTPS POST that carries host- and installer-identifying data (references to process.env, process.cwd(), a hardcoded hostname, and filesystem probes via fs.existsSync). The composition — env/cwd/child_process reads combined with an outbound https.request POST to a hardcoded destination in the main module — matches the shape of an installer-side data exfiltration beacon rather than any documented library function. The package advertises no purpose that would justify posting environment variables and working-directory information to a remote host on load.

Source: amazon-inspector (e3eccd07c931ee578e1201f5fbb7f4610fd5291202c0fcee2b30c959c80c871e)