24-casino@0.0.0-stage

Analysis

24-casino@0.0.0-stage is an empty placeholder publish: the npm manifest sets "stub": true and the tarball contains only package.json (empty scripts and bin maps, no dependencies) and a README naming the version "Temporary Holding Version ... awaiting a staged release". Total published content is 359 bytes across 2 files. There is no JavaScript, no lifecycle hook, no executable or binary content, no environment or credential access, and no network endpoint or other IOC in this version. The package name and the reserved "-stage" version placeholder sit in the casino/scam-gambling naming space used to park package names ahead of a payload release, so the risk record covers the name reservation itself rather than code shipped here; any later 24-casino version that adds an install hook or bundled script should be treated as the payload stage.