test-flow-entire@1.0.0

Analysis

test-flow-entire@1.0.0 is a dependency-confusion attack package. The package itself is a trivial stub (72 bytes of JS) with no functionality, but its package.json declares a dependency on "layer-module-kernel-matrix" resolved from the attacker-controlled URL hxxps://artifacts[.]stg[.]yosiroute[.]com/npm/layer-module-kernel-matrix. When npm installs this package, it fetches and installs code from that non-registry URL, which the attacker controls and can serve arbitrary malicious payloads from. The package has no repository, no README of substance, and its sole purpose is to redirect dependency resolution to an external attacker server.