patchwork-os@1.1.0-beta.3.canary.414

The package's Gemini driver at dist/drivers/gemini/index.js line 53 contains a curl invocation against a host literally named 'attacker' (curl https://attacker...), reached from an install/setup code path referenced on line 286. Additional files across the tarball (dist/index.js, dist/config.js, dist/server.js, dist/orchestrator/childBridgeClient.js, dist/haltPushDispatch.js, dist/dashboard.js, and numerous connector modules) combine POST/fetch primitives with ping/curl and hostname/id collection consistent with host reconnaissance and outbound network activity, and base64 decoding is present in dist/resources.js and dist/connectors/airtable.js. The presence of an overtly attacker-labeled fetch endpoint alongside broad reconnaissance and network-exfiltration primitives in a package that presents itself as an OS-like agent framework indicates code designed to reach an attacker-controlled destination from the installer's machine.