ssp-config-management-tool 1.0.0
Security hold placeholder
“security holding package”
Release declares an entry point it omitsDefault npm-init placeholder test script
SHA-25657c5c3a72049b7eac557dfe1ca1cb367a8ee6f43111429eaf6e8baad998c9f99
MaleculeO(S₂)Md(Pa₆)
Also flagged by osv (MAL-2025-49238: Malicious code in ssp-config-management-tool (npm)) +3 more.