The npm package 'twilio-functions' version 99.99.99 is a malicious typosquatting package that executes a postinstall script to collect host system identifiers and environment variables, sending this data to an external webhook URL. It also attempts a DNS callback if the network POST fails. The package mimics the Twilio SDK namespace and appears designed for reconnaissance during installation.