The npm package 'getd-content-management' version 0.0.1 is a malicious typosquatting package impersonating the legitimate @getd/* scope. During installation, it silently collects host identifiers such as hostname, username, platform, current working directory, and CI environment variables, then sends this data to an attacker-controlled external URL. This behavior is concealed from the user by swallowing errors, making the compromise stealthy. The package presence indicates a full system compromise, and all secrets and keys on the affected system should be rotated immediately. Removal of the package alone does not guarantee elimination of all malicious artifacts.