Malicious package due to suspicious preinstall, preupdate, and test scripts downloading and executing code from a remote server.
No verification record available.
The package contains suspicious preinstall, preupdate, and test scripts in pakage.json that download and execute code from a remote server (oastify.com). This allows for arbitrary code execution and exfiltration of sensitive information (username, path, hostname) during installation, update, and testing, indicating malicious intent.
