The npm package beautiful-ui-monitoring version 1.0.8 is a malicious package that falsely advertises itself as a UI design tool but contains no UI code. Instead, its postinstall script compiles a native shared library to a world-writable temporary directory. This library, when loaded, deletes all shared object files (*.so) under /tmp and logs the current user and group IDs to a file. The package author field is empty, and the package includes test code demonstrating the malicious behavior. Installing this package results in planting a destructive native artifact in a shared location under misleading pretenses.