The npm package datefmt-simple-utils version 1.0.0 is a malicious package masquerading as a date-formatting utility. During installation, it executes a postinstall script that opens a TCP connection to a hardcoded remote host and attaches an interactive shell, allowing remote command execution on the installer's machine. The package does not provide any legitimate date-formatting functionality and uses multiple fallback methods to establish the reverse shell.