markable-table@3.1.0

Analysis

markable-table is a combosquat of the legitimate markdown-table package. It claims the real package's repository and funding URLs but is published by a different maintainer. The package ships a preinstall hook ("node index.d.js") that references a file not present in the tarball — the file index.d.js does not exist among the shipped files (only index.js, index.d.ts, readme.md, license, package.json, and a type map are included). The preinstall hook would fail at install time, but its presence indicates the package was designed to execute code during installation. The shipped index.js is a verbatim copy of the legitimate markdown-table source code.