The npm package @ferudionz/webautomation version 1.0.0 contains malicious code that exfiltrates caller-supplied data to a hidden remote server. The package exposes a single function, connet(x), which sends its argument to an obfuscated and runtime-reconstructed URL, hiding the destination from static analysis. The package lacks legitimate documentation, author metadata, and presents itself misleadingly as a generic logger tool. This behavior indicates intentional data theft rather than legitimate functionality.