The npm package 'snavbox' versions 1.0.0, 1.0.2, and 1.0.3 is identified as malicious. It downloads and executes unverified native shared libraries from an unrelated external domain without integrity checks, enabling arbitrary code execution. The package misrepresents its purpose, embedding multi-protocol proxy functionality, a remote management agent, and persistent callbacks to external servers. Any system running this package should be considered fully compromised, and secrets should be rotated immediately. Removal of the package may not fully eliminate the compromise due to potential persistence mechanisms.