The npm package frontend-regulations version 99.9.1 is a near-empty wrapper that declares a dependency on an off-registry tarball hosted on a Google Cloud Storage bucket unrelated to any documented publisher. Installing this package causes npm to fetch and execute lifecycle scripts from this external tarball during installation. The package itself provides no functionality and appears designed to smuggle malicious code into the dependency tree using a dependency-chain dropper pattern.