The npm package 'streak-view-core' version 1.0.0 contains malicious code that executes a native Linux ELF binary on the host system. The package disguises itself as a simple calendar utility but includes a base64-encoded ELF payload that is decoded and executed at module load time. This behavior is unexpected and suspicious for the package's stated functionality.