test-delete-package@99.0.0-dummy

Analysis

The tarball contains no executable code — only a minimal package.json with name "test-delete-package", artificially inflated version "99.0.0-dummy", and description "DUMMY VERSION - Package cleanup". The high version number is a known dependency-confusion and typosquatting preparation technique: by registering the package name at a version higher than any legitimate internal package, the actor ensures it will take priority if a project's dependency resolver accidentally matches against the public npm registry. The package currently executes no code, but the namespace is reserved and ready for future malicious publication under the same name.