The npm package 'prezdentkxheiw' versions 1.0.0 and 1.0.1 contains a malicious HTML file that impersonates a Cloudflare challenge page and redirects browser visitors to a target URL using obfuscated JavaScript. This package does not execute code on installation or require, and thus does not represent a supply-chain attack against installers. Instead, it abuses the npm registry as static hosting for phishing or redirect landing pages when accessed via browser-based CDN services. Although no direct code execution occurs on the installer's machine, any system running this package should be considered compromised according to one source, recommending immediate secret rotation and package removal. No official patch or fix is documented. No known exploits in the wild have been reported.