velocity-sdk-ui@1.0.0

Analysis

The package ships no executable code — the tarball contains only a package.json manifest that declares a main entry point (index.js) which is not present in the tarball. This is a namespace-claim pattern: the package name is reserved without delivering the referenced code, a common precursor to shipping a malicious payload in a later version. No repository, license, or documentation is included.