Malicious dependency-confusion package (same campaign as web-advertising 999.9.16). Published at version 999.9.16 to override an internal package of the same name. A silent preinstall hook (node index.js) auto-executes on install, collects a host reconnaissance fingerprint (hostname, username, home/cwd, public IP and subnet, GitHub/npm usernames, git email domain, npm registry, NODE_ENV, CI identifiers, AWS region) and exfiltrates it as hex-encoded chunked DNS queries (DNS tunneling) to the same OAST/Interactsh collaborator da51rv0hb2uc72tg4gvgdepinjcallbk1.oast.fun. Same author (stillmadd.688+temptation@gmail.com) and beacon host as web-advertising 999.9.16. Self-declared research PoC but runs and exfiltrates without consumer consent.