package.json
Filename is package.jsonManifest declares npm preinstall lifecycle hook
SHA-256a2097bd95bc87b07245bf3ee73cd59ba28e713efa3e953b0dcd2aa0dd2e89bf4
MaleculeO(S₂)Md(Pa₃)
Evidence
1{"name": "legitimate-package", "version": "1.0.0", "scripts": {"preinstall": "true"}}