chatgpt-desktop-setup@0.0.0-stage

Analysis

This version of chatgpt-desktop-setup contains no executable code: the tarball holds only package.json and README.md (343 bytes unpacked). package.json declares {"name":"chatgpt-desktop-setup","version":"0.0.0-stage","stub":true,"description":"Temporary package placeholder for staged publishing"} with no scripts, no bin entries, no dependencies and no lifecycle hooks. README.md states: "This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release." The package name impersonates the ChatGPT desktop application installer, a product that is not distributed through npm; the same name has previously been used to distribute malicious code, and this placeholder is staged ahead of a follow-up release under that name. Nothing in this version runs, and no network endpoint, credential access or file is present in the tarball, so this record is metadata-only: it documents the impersonating name and the announced staged release rather than observed malicious behaviour.