payloads-dep-confusion

The skill is a security-testing reference, but its concrete workflow includes publishing a maliciously substituted public package and waiting for target use. This is a high-risk supply-chain exploitation capability; no credential theft, exfiltration, installer execution, or confirmed malware is evident.