@mntv-analysis/workspaces-components@0.0.0-stage

Analysis

@mntv-analysis/workspaces-components@0.0.0-stage is an inert placeholder publish of a package name that has previously shipped a malicious version. The tarball contains only package.json and README.md (358 bytes unpacked) with no executable code, no lifecycle hooks, no bin entries and no dependencies, so installing this specific version runs nothing. The package.json sets "stub": true with the description "Temporary package placeholder for staged publishing", and the README states it is a temporary holding version and that an operational version to replace it has been submitted and is awaiting a staged release. The version therefore reserves the package name while a functional release is staged; consumers should treat the name as compromised and not install any version of it. No network indicators, hosts, or dropped files are present in this version.