eslint-generate-prerelease@99.9.1

Analysis

eslint-generate-prerelease@99.9.1 is a dependency-confusion package: a near-empty stub (index.js exports an empty object) whose only real content is a dependency `ltidisafe` pinned to a non-registry URL, `hxxps://ltidi[.]storage[.]googleapis[.]com/depenconf/ltidisafe-3[.]6[.]2[.]tgz`, a Google Cloud Storage bucket. Installing the package pulls and installs that remote tarball from the CDN instead of the npm registry, so the actual payload is attacker-controlled and served from outside the registry. The package ships at version 99.9.1 on a name that mimics eslint tooling.