arbitrum-bridge

SUSPICIOUS: the stated purpose fits blockchain bridging, but the install instruction is not internally consistent with the official package evidence provided. The main risk is unclear dependency provenance for `npm install arbitrum`; no direct credential theft or malicious data exfiltration is shown.