discovered
Payload-free scope-reservation stub by the same actor (publisher zynkit-sk393b@wshu.net), used to reserve/anchor the @zynkit scope alongside @zynkit/jwtbytes. No postinstall hook, no payload. Attributed to the campaign by shared publisher infrastructure, not by malicious code.