@baanx/common@9.9.9

Analysis

Dependency-confusion squat on the scoped name @baanx/common at version 9.9.9. The package is an empty placeholder (index.js exports an empty object, no implementation, no lifecycle hooks, no dependencies) published at a high version on a scoped name so that builds referencing the internal/private @baanx/common package resolve to this public impostor instead. No executable payload is present in this version; the risk is the name/version collision itself.