tostpro@99.99.99

Analysis

tostpro@99.99.99 is a high-version stub package (version 99.99.99) published on a name that claims to be reserved by Tellyo as a dependency-confusion / npm-squatting placeholder. The package ships no functional code and declares no install scripts; its manifest states it performs no actions. The claimed author (Tellyo Security) does not match the account that actually published the package. Because the package tarball is unavailable, no executable payload or network behaviour could be confirmed; the risk is the dependency-confusion squat shape itself — a high-version package on a name that could be resolved in place of a legitimate internal dependency.