mintel-taskbar@45.0.0

Analysis

mintel-taskbar declares a self-dependency pointing to an attacker-controlled external URL (hxxps://repo[.]securityctrl[.]com/mintel-taskbar). This is the classic dependency-confusion / self-dependency structure: npm resolves the self-dependency from the external URL at install, allowing the publisher to serve an arbitrary malicious tarball (which can carry postinstall hooks) at any time, while the registry publish itself stays inert.