The npm package express-mongo-santi (version 1.1.9) is a malicious typosquat of express-mongo-sanitize. Its main file is heavily obfuscated and designed to fetch and execute attacker-controlled code remotely upon being required. This results in arbitrary code execution on the user's machine under their user identity.