nx-app@9999.0.0-security-test

Analysis

nx-app@9999.0.0-security-test declares a dependency on itself resolved from the external non-registry URL hxxps://repo[.]securityctrl[.]com/nx-app. Installing the package causes npm to fetch and install a package from that attacker-controlled host, whose install scripts then execute. The package is published at the inflated version 9999.0.0-security-test, a dependency-confusion pattern intended to win resolution over a legitimate package of the same name.