litespeed-cache @1.1.2

Summary

This npm package (a name resemblance to the WordPress LiteSpeed Cache plugin, which is not an npm module) ships a preinstall script and a top-level index.js that both collect os.hostname() and os.userInfo().username and issue an HTTPS request to a hardcoded webhook.site endpoint (https://webhook.site/c72c8172-a424-4a19-91b4-28f40cae3c83). The beacon fires automatically on npm install via the preinstall lifecycle hook, and is repeated at module load so that any consumer that require()s or imports the package also transmits host identifiers, bypassing --ignore-scripts . webhook.site is an anonymous third-party request-inspection collector; there is no functional package behavior beyond the beacon.

Source: amazon-inspector (6f3af61c30e0a85b26bb59e521eb02a26c0b7071446d99d03cdf6b07f790b1f8)