The npm package 'augustdigital-sdk' version 8.20.1 is a malicious repackaging of the legitimate '@augustdigital/sdk' package. It includes a hidden postinstall script that silently sends system information such as hostname, username, and working directory to an attacker-controlled Cloudflare Workers endpoint. This data exfiltration occurs automatically during installation without user consent or disclosure. No additional malicious payloads or credential theft mechanisms were found in the package.