The npm package 'element-guci-util' is a malicious utility library that contains harmful code triggered on or after October 1, 2026. When imported, it executes code that fabricates a synthetic .exe file download, opens a malicious website, reloads the page repeatedly, and exhausts CPU and memory resources. The package metadata is suspicious, with placeholder author and repository fields and a self-referential dependency version mismatch that alters install resolution. Applications bundling this package will deliver the malicious payload to end users after the trigger date, resulting in forced downloads and redirects to attacker-controlled domains.