@newspage/libx-amount@99.99.42

Summary

The package is a placeholder whose index.js, on require/import, issues an HTTPS GET to the hardcoded host accenture-npm.azurewebsites.net at path /libx. The scoped name @newspage/libx-amount, the implausibly high 99.99.41 version, the A simple placeholder for npm. description, and the anonymous author together form the canonical dependency-confusion shape intended to shadow an internal @newspage-scoped package during resolution. The beacon's purpose is to confirm successful resolution of the squatted name inside a target organization, disclosing the installer's source IP and the fact that the internal namespace resolved to this external artifact. The package provides no other functionality.

Source: amazon-inspector (55998039814c91bc8b3b9af13b857848fd77dedaaedf99a783d64573fc47c15a)