ticketcathayoct12@0.0.0-stage
Malicious code in ticketcathayoct12 (npm)
Analysis
This package is an empty placeholder. The published tarball contains only a README and a package.json (name ticketcathayoct12, version 0.0.0-stage, description "Temporary package placeholder for staged publishing", stub: true). It declares no dependencies, no optional dependencies, no bin entries and no lifecycle scripts, and ships no JavaScript or other executable content, so installing it runs nothing and contacts no network destination. This record is based on the package manifest and tarball contents; the package contains no code to analyse and no code-level indicators are available.
- analyzed by
- Leitwacht
- first seen
- Oct 13, 2026, 09:17 AM
- analyzed
- Oct 13, 2026, 09:18 AM
Related advisories
- orderly-plugin-liquidity-heatmap@1.0.0
- nodetokyo-us@0.0.0-stage
- liferay-workspace-scripts@0.0.0-stage
- orderly-plugin-liquidity-heatmap@1.0.6
- @teamqadeer1/baileys@1.0.0
- orderly-plugin-liquidity-heatmap@1.0.4
- tailwindcss-form@0.0.0-stage
- @coopeuch/button@1.999.999
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.