The npm package 'process-mite' (version 1.1.79) is part of a malicious campaign by the 'max233' account. Importing this package triggers a detached Node.js process that fetches and executes remote code from a mutable JSON endpoint on npoint.io. The executed payload has full Node.js capabilities and performs clipboard theft, input event logging, filesystem scanning, and Chrome extension storage theft. The package falsely advertises itself as a runtime utility but functions as a remote code execution dropper.