ng-search-api@99.9.1

Analysis

ng-search-api@99.9.1 is a dependency-confusion stub (empty index.js, 351 bytes, version 99.9.1, no description). Its sole dependency "ltidisafe" is pinned to a remote tarball at hxxps://ltidi[.]storage[.]googleapis[.]com/depenconf/ltidisafe-3.0.5.tgz, so npm install fetches a payload from attacker-controlled storage. The install fails on a malformed tarball before execution, but the package has no legitimate purpose beyond pulling code from that external host.