The speed2 npm package is part of a typosquatting campaign involving speed1 through speed5 packages. These packages are non-functional Node modules that bundle browser-based malicious code, including obfuscated JavaScript assets and a web proxy frontend. The package attempts to lure users via a browser popunder that opens a suspicious URL on user interaction. Although the Node.js entry point does not execute malicious code, the presence of obfuscated assets and mass-publishing scripts indicates malicious intent. Installing or running this package may fully compromise the host system.