The npm package 'filewisee' versions 0.1.0 and 0.1.1 contains malicious code that downloads and executes an opaque binary from an anonymous external host. This binary is saved in a hidden directory under the user's home folder and executed with hidden process settings, without any verification of the downloaded content. The package masquerades as a date-formatting utility to trick users into invoking the malicious functionality. Systems with this package installed should be considered fully compromised.