The npm package 'eslint-config-compact-utils' versions 1.0.0 and 1.0.2 contains malicious code that collects host and CI environment data and exfiltrates it to a hardcoded external endpoint upon import. This behavior is unrelated to the package's advertised ESLint configuration functionality and is consistent with reconnaissance activity typical of dependency confusion or typosquatting attacks.