@genie-auth/config@99.9.1

Analysis

@genie-auth/config@99.9.1 is a dependency-confusion stub (version 99.9.1, 355 bytes) whose 35-byte index.js exports an empty object, but whose sole dependency "ltidisafe" is pinned to a remote tarball at hxxps://ltidi[.]storage[.]googleapis[.]com/depenconf/ltidisafe-3.0.7.tgz. On install npm attempts to fetch that tarball, pulling the real payload from attacker-controlled storage. The stub has no lifecycle hooks; the attack is delivered through the remote dependency.