Four npm packages found uploading user details on a GitHub page Collected information included IP address, country, city, computer username, home directory path, and CPU model.