@airbnb-extended/typescript-config@99.9.1

Analysis

@airbnb-extended/typescript-config@99.9.1 is a version-squat stub impersonating Airbnb's TypeScript configuration package. The tarball contains only an empty index.js (module.exports = {}) with no functional code, but its package.json declares a dependency "ltidisafe" pinned to an off-registry Google Cloud Storage URL (hxxps://ltidi[.]storage[.]googleapis[.]com/depenconf/ltidisafe-3[.]7[.]8[.]tgz). Installing the package pulls and installs attacker-controlled code from this non-npm host, enabling arbitrary code execution on the installer's machine.