The npm package cookie-js-ease@2.1.7 impersonates the popular js-cookie library but contains malicious code that executes attacker-controlled JavaScript in Node.js environments. When the package's Cookies.set() or Cookies.remove() functions are called in Node.js or with expires set to 0, it fetches and evaluates remote code from a hidden URL, enabling remote code execution. This malicious behavior is specific to the CommonJS build and does not affect the .mjs or .min.js variants. This is a typosquatting attack combined with remote code execution targeting developers who mistakenly install this package instead of the legitimate js-cookie library.