easypanel-client@1.0.0

Summary

The package's npm preinstall hook collects the installer's hostname, OS username, current working directory, and CI-related environment variable names, base64url-encodes them, and transmits them to the hardcoded out-of-band host easypanel-client.<subdomain>.oob.lyomeri.com via both a DNS lookup and an HTTP GET request. The shipped index.js is empty (module.exports = {}), so the only effect of installing this package is the install-time beacon. The package name and structure are consistent with a dependency-confusion probe targeting internal easypanel-* names.

Source: amazon-inspector (1675d70b09ce1f826b69fbfcee3cf56a81c49c37fa4fb4bdafd4f72b736880f8)