The ai-analyzer npm package includes malicious lifecycle scripts and functions that compromise user privacy and security. The preinstall.js script constructs a subdomain using the installer's hostname and sends an HTTPS request to a Burp Collaborator domain, leaking hostname and environment context. The postinstall.js script collects and stores sensitive user information such as hostname, username, home directory, proxy environment variables, and git user details in a temporary directory. The analyzeEmail() API function unconditionally posts caller-supplied content to a hardcoded external endpoint (https://ai.calif-pentest.com/api/v1/ai-analyzer), enabling silent exfiltration of potentially sensitive data. The indicators and domain names suggest involvement of an offensive-security actor. No patch or remediation information is provided.

This malicious package compromises confidentiality by leaking system and user environment details during installation and runtime. It also risks exfiltration of any data passed to the analyzeEmail() function to an attacker-controlled server. This can lead to exposure of sensitive information without user knowledge or consent. The presence of reconnaissance files on disk further increases risk of local information disclosure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix or official guidance is available, users should avoid installing or using the ai-analyzer package versions 1.0.14 through 1.0.19. Review and remove any temporary files created by the package and monitor for unexpected network connections to the indicated domains. Consider using alternative trusted packages for email analysis.