consumerweb-creditcollection@99.9.1

Analysis

Package consumerweb-creditcollection@99.9.1 is a dependency-confusion attack. It contains no functional code (empty index.js) but declares a dependency on "ltidisafe" resolved from an external URL: hxxps://ltidi[.]storage[.]googleapis[.]com/depenconf/ltidisafe-3[.]5[.]3[.]tgz. When installed, npm fetches this attacker-controlled tarball, which can execute arbitrary code in the installer's environment. The package name mimics an internal/enterprise naming convention, uses an inflated version number (99.9.1) to win dependency resolution, and has no repository or description.