Affected script: "install-scripts:preinstall"

The script contains code that collects the user's OS name and Git configuration details (including username and email) and sends them to a remote server using HTTP or HTTPS requests. This behavior is characteristic of a data exfiltration attempt, which is considered a serious security vulnerability. The use of an external server with potentially unsecured HTTP communication further heightens the risk, as information could be intercepted or corrupted during transit. Additionally, the indiscriminate copying to a directory outside the intended project scope ('../../../public/') may lead to a directory traversal vulnerability, where an attacker could access or compromise files outside of the intended directory.