The npm package gdwkh6vcbu@1.0.0 contains malicious code designed to serve an obfuscated phishing landing page. It impersonates a Cloudflare Turnstile verification page and redirects users to a malicious URL. The package does not execute code during installation but abuses npm CDN mirrors to distribute phishing content targeting end-user browsers. Installing this package may lead to full system compromise, requiring immediate secret and key rotation and package removal.