kiyoramarkets@0.0.0-stage

Analysis

kiyoramarkets@0.0.0-stage is a code-free placeholder published under the kiyoramarkets package name, which has previously been used to distribute malicious code. The tarball contains only package.json and README.md (2 files, 335 bytes unpacked). package.json sets "stub": true with the description "Temporary package placeholder for staged publishing", and the README states that this version is a temporary placeholder and that an operational version "has been submitted for review and is awaiting a staged release". This version contains no executable JavaScript, no lifecycle (preinstall/postinstall) hook, no bin entry, no dependencies and no network indicators. The publish reserves the kiyoramarkets name ahead of a staged release of the operational payload; any later version of this name should be treated as untrusted. Analysis of this version is metadata-only — there is no code in the tarball to inspect.