The mnteckets npm package versions 1.0.0 and 1.0.1 contain malicious content designed to redirect users who open the included HTML file in a browser to a phishing site. The package does not execute code during installation or require/import in Node.js, but the HTML file mimics a Cloudflare Turnstile challenge and performs an obfuscated redirect upon user interaction. This behavior indicates the package is a registry-hosted phishing or redirect threat rather than a traditional supply-chain attack. There is no confirmed patch or fix available.