The npm package 'mnzjgxciwadk' version 1.0.0 contains a malicious HTML file that acts as a phishing or redirect landing page. The package's main file is an index.html that, when opened in a browser, presents a Cloudflare Turnstile-style challenge and then redirects the user to a URL under the *.olive.club domain using obfuscated JavaScript. This behavior does not trigger during npm install or when requiring/importing the package in code, so the threat targets users opening the HTML file rather than developers or build systems. The package represents registry abuse rather than a direct supply-chain attack. According to one source, any system with this package installed or running should be considered fully compromised, with immediate secret/key rotation recommended. No official patch or fix is indicated.