The npm package '@0l00000l/auth' is a malicious authentication library impersonating a legitimate package using digit/letter homoglyphs in its name. It exposes typical authentication handlers that forward sensitive user data, including plaintext passwords, email addresses, and authorization headers, to a hardcoded third-party URL without any configuration or disclosure. This behavior risks exfiltration of user credentials to an attacker-controlled server.