@cloudplatform-single-spa/ml-inference-router@99.99.99

Analysis

Dependency-confusion stub mimicking the @cloudplatform-single-spa namespace at version 99.99.99, a tiny ~7.9KB bundle with a postinstall lifecycle hook. The scripts/postinstall.js contains the command-and-control domain oob[.]moika[.]tech and calls out to it on install. Published by a high-volume malware author; later removed from the registry.