Explicit use of connect(data) issues an HTTP GET containing the supplied data to a hard-coded third-party relay. No automatic install-time or import-time execution is present.
Static reason
No blocking static signals were detected.
Trigger
A consumer imports and calls connect(data).
Impact
Potential exfiltration of sensitive data supplied by an integrating application.
Mechanism
Transmit caller-supplied data to a hard-coded remote relay via axios GET.
Rationale
The package has no automatic execution or destructive behavior, so blocking is not supported. Its sole exported capability nevertheless transmits arbitrary caller data to an unexplained endpoint and warrants a warning.
Evidence
index.jspackage.jsonREADME.md
Network endpoints1
api-relay-server-eexysjiyg-hdniis-projects.vercel.app/api/