crm-reportinsightserv-paypal @28.0.0

Summary

crm-reportinsightserv-paypal@28.0.0 executes a preinstall script (index.js) that collects installer host identifiers — os.hostname(), os.platform(), os.arch(), os.homedir(), and dns.getServers() — and POSTs them to the hardcoded Burp Collaborator subdomain x75kp5s6h5jveprlhbibqpi4nvtnhe53.oastify.com/hit at npm install time. The package name mimics an internal-sounding scope (PayPal / CRM reporting) and its only functional behavior is the beacon, matching the shape of a dependency-confusion reconnaissance package.

Source: amazon-inspector (ed758e4154bc29bda7b5ee78165766980d88068090a9853a2243509d97c11152)