The npm package @meziizana/frontend-logger version 10.0.0 contains malicious code that executes a preinstall script during npm install. This script sends the installer's username, current working directory, and hostname to a third-party endpoint at webhook.site without user consent. The destination is a public request-inspection service commonly abused for data exfiltration, indicating unauthorized reconnaissance activity.