@wardenfeng/cap-tester-server-darwin-x64@0.0.0-stage

Analysis

@wardenfeng/cap-tester-server-darwin-x64@0.0.0-stage is an inert placeholder publish, not a functional package. The tarball contains only two files (382 bytes total): a package.json declaring "stub": true with the description "Temporary package placeholder for staged publishing", and a README titled "Temporary Holding Version" stating that an operational version has been submitted for review and is awaiting a staged release. It ships no JavaScript, no lifecycle hooks, no bin entries, no dependencies and no optional dependencies, so installing it executes nothing and contacts no network endpoint. This version has no network IOC. The package name itself has previously shipped malicious code, and this stub reserves the name ahead of a payload release; the operational version that follows should be treated as hostile.