@pisell/pisellos@2.2.173

Analysis

Critical maintainer_change finding: email changed from [account] (personal qq[.]com account) to [account] (corporate domain). Package has prepublishOnly lifecycle hook that runs 'npm run build' (father build). No token-theft markers found. Package appears to be legitimate booking/checkout solution SDK. However, maintainer_change + lifecycle hook is a known account-takeover attack pattern; cannot confidently rule out compromise without verifying publisher identity and repository legitimacy. Recommend human review to confirm this is a legitimate corporate migration vs. account takeover.