The npm package 'messenger-style' version 1.0.1 contains malicious code that executes during installation. Instead of providing messaging functionality, its preinstall script collects sensitive host information such as hostname, username, home directory, DNS servers, and contents of /etc/passwd and /etc/hosts. This data is then exfiltrated via HTTPS to an attacker-controlled domain used for out-of-band interaction. No legitimate functionality is present in the package.