The npm package eslint-angular-react contains malicious code that executes a preinstall script during npm install. This script sends system information such as OS, username, working directory, and hostname to a hardcoded IP address, acting as a reconnaissance beacon. The package does not provide any legitimate ESLint functionality and appears to be a typosquatting or dependency confusion attempt targeting developers. Installing this package may lead to full system compromise, requiring immediate secret and key rotation.