The 'exnesss' npm package (version 0.0.1) is a malicious typosquatting package targeting the legitimate 'exness' package. Upon installation, it executes a postinstall script that makes an HTTPS request to a hardcoded Burp Collaborator domain, leaking network and DNS metadata of the installer to an attacker-controlled server. The package provides no legitimate functionality and is considered fully compromising to any system where it is installed.