test-flow-entire2@1.0.0

Analysis

Package test-flow-entire2@1.0.0 is a stub with no functional code. Its only dependency, marker-hash-macro-daemon, is pinned to a non-registry URL (hxxps://artifacts[.]stg[.]yosiroute[.]com/npm/marker-hash-macro-daemon). During npm install, the package manager fetches and installs this dependency from the external host, which serves the actual malicious payload. The package has no repository, no lifecycle scripts, and its index.js exports only static metadata — the sole purpose is to pull in a remote dependency from a non-standard host.