u-paging@0.0.0

Analysis

Namespace-squatting package u-paging@0.0.0 contains no executable code — only an empty shell package.json, README, and LICENSE. The package impersonates the well-known open-source developer Anthony Fu (antfu) in its author field, homepage, and README template, but is published by a different actor. This is a pre-positioning step: reserving the package name under a falsely claimed identity to later ship a malicious version that would auto-update for existing installs.