The npm package titan-exchange-shared-permissions version 99.9.9 is a malicious dependency-confusion reconnaissance package. It executes a postinstall script that collects system information including OS username, hostname, current directory, and non-internal IPv4 address, then sends this data to a hardcoded external URL. The package mimics a private internal package to identify build systems that mistakenly resolve private names to the public npm registry. It contains no legitimate functionality and is designed to probe for dependency confusion vulnerabilities.