The [email protected] npm package includes a postinstall script and CLI code that silently harvests host identifiers such as the OS username, hostname, current working directory, platform, architecture, and Node.js version. This information is transmitted via HTTPS POST requests to a hardcoded domain (livekit-agents.xyz) controlled by the attacker. The package falsely advertises itself as an AI code explanation tool but exports only a trivial greet function. The malicious domain and dependency mimic the legitimate LiveKit project to deceive users. This results in undisclosed host tracking on every install and CLI execution.

Users installing or running [email protected] unknowingly expose detailed host environment data to an attacker-controlled server. This enables attacker tracking of developer or CI environments, potentially facilitating follow-on targeting or reconnaissance. There is no indication of direct code execution or data corruption, but privacy and operational security are compromised.

No official patch or remediation is currently available. Users should avoid installing or running [email protected]. Remove the package from any environments where it is present. Monitor for any suspicious network connections to the domain livekit-agents.xyz and block it if possible. Check vendor advisories or npm security notices for updates regarding this package.