The npm package 'getd-typescript-eslint-rules' version 0.0.1 is a malicious typosquat that executes a post-install script collecting sensitive environment data and sends it to a third-party endpoint. The package declares itself as security research but actually leaks installer information including hostname, OS username, platform, working directory, and CI environment markers. Installation errors are suppressed to avoid detection. Systems with this package installed should be considered fully compromised, and all secrets and keys on those systems should be rotated immediately.