The npm package 'parallely' is a malicious typosquatting package impersonating 'concurrently'. It contains code that decrypts and downloads a platform-specific payload at runtime, installs anti-analysis measures, and executes the payload with persistence mechanisms. This compromises any system where the package is installed, potentially giving attackers full control. Immediate removal and secret/key rotation are advised.