The npm package calculator-preinstall-chain-demo versions 1.1.1 and 1.1.2 is identified as malicious. It does not have its own install script but depends on calculator-preinstall-hook-demo@1.1.2, which runs a preinstall script that sends the machine's hostname and OS username to a Discord webhook. This behavior is considered malicious due to unauthorized data exfiltration.