The npm package @worrisome/reutil is a malicious package used as part of a phishing campaign that hosts a fake Cloudflare Turnstile verification page. The package contains only an index.html file that, when opened in a browser, decrypts a redirect URL and navigates the user to a phishing site. It does not execute malicious code during npm install or affect the installing machine directly. The abuse involves using the npm registry as a static file host for phishing landing pages, targeting users who open the HTML in a browser rather than developers installing the package.