The salesforce-vscode-slds npm package was published by a malicious user as part of a dependency confusion attack, mimicking a private Salesforce package namespace. It includes a preinstall hook that runs automatically during installation, which installs @sentry/node and executes a script that collects host telemetry such as public IP, hostname, OS username, and runtime metadata. This data is sent to an attacker-controlled Sentry project endpoint, enabling the attacker to identify which organizations have installed the package. The payload is consistent across multiple similarly named packages, differing only in the targeted Sentry project ID. This activity is reconnaissance rather than direct exploitation or code execution beyond telemetry collection.

The malicious package collects and exfiltrates sensitive environment information from the host machine during installation, including public IP address and personally identifiable information like hostname and OS username. This can aid attackers in profiling victim environments and confirming successful dependency confusion attacks. There is no indication of further exploitation or system compromise beyond telemetry data exfiltration.

No official patch or remediation is documented. Users should verify package sources carefully and avoid installing packages from untrusted or unexpected namespaces, especially those mimicking internal or private packages. Organizations should audit their dependency resolution configurations to prevent dependency confusion attacks. Monitor for and remove any installations of this malicious package. Patch status is not yet confirmed — check the vendor advisory or npm security advisories for updates.