@reducers/projects@99.9.1

Analysis

@reducers/projects@99.9.1 is a dependency-confusion stub: a 361-byte package with an empty index.js that declares a dependency "ltidisafe" fetched at install time from a non-registry Google Cloud Storage URL (hxxps://ltidi[.]storage[.]googleapis[.]com/depenconf/ltidisafe-3[.]5[.]8[.]tgz). The package ships no functional code of its own; its sole purpose is to pull and install the remote dependency from the attacker-controlled CDN, delivering the payload to any project that installs it.