The @logdna-web/styles npm package is a malicious package published under a namespace mimicking a legitimate internal package scope. It contains a preinstall script that executes automatically during npm install, which collects the host's public IP and other personal identifiable information (PII) and sends it to an attacker-controlled Sentry project. The package also silently routes error reporting data from consumers to the attacker's Sentry endpoint if used without explicit configuration. This behavior is part of a dependency confusion reconnaissance campaign targeting developers searching for LogDNA packages.