The npm package @uh-platform/nadaver2 version 102.0.0 contains malicious code that executes during installation. Its package.json defines a preinstall script that runs a Node.js script which sends the installer's hostname and OS username to an attacker-controlled domain via DNS and HTTP requests. This package appears to be part of a dependency confusion attack and does not provide any legitimate functionality.