The syft-acp-atoms npm package is part of a dependency confusion reconnaissance campaign. It impersonates an internal package name to be installed mistakenly by misconfigured package resolvers. The package declares a preinstall hook that runs automatically during npm install, which initializes a Sentry client with a hardcoded attacker-controlled DSN and collects telemetry data such as hostname, OS username, runtime metadata, and the public egress IP address. This data is sent to the attacker's Sentry project, allowing attribution of successful installs to specific victim organizations. The package also runs a beacon script that transmits hex-encoded host information to a malicious external URL. The package contains no functional library code, indicating its sole purpose is reconnaissance via telemetry exfiltration.

Successful installation of this package results in the exfiltration of sensitive host telemetry including hostname, OS username, current working directory, runtime environment metadata, and public IP address to an attacker-controlled Sentry endpoint and an external URL. This information can be used by attackers to identify and profile victim environments, facilitating further targeted attacks. The package does not provide any legitimate functionality and solely acts as a reconnaissance beacon. There is no indication of direct code execution beyond the telemetry collection and exfiltration during installation.

Avoid installing packages from untrusted or unknown sources, especially those mimicking internal package names. Verify package names and sources carefully to prevent dependency confusion attacks. Since no official patch or fix is available, remediation involves correcting package resolver configurations to prioritize private/internal registries and removing any instances of this malicious package. Monitor package dependencies for suspicious or unexpected additions. Patch status is not yet confirmed — check the vendor advisory or trusted security sources for updates.