no-date-parsing@2.2.0

Analysis

no-date-parsing@2.2.0 is a typosquat of common date-parsing libraries whose manifest declares dependencies.inline = hxxp://npm[.]artifactsnpm[.]com/npm/no-date-parsing, an HTTP URL pointing to a non-standard, attacker-controlled npm registry. The shipped index.js is a trivial Hello World stub, indicating the real payload is served from that external registry during dependency resolution.