MAL-2026-17778 — Malicious code in some-very-long-package-name (npm)

The source describes the npm package as a stub module whose actual behavior collects host and installation identifiers and sends them to a hardcoded HTTP address.