The npm package '@asdfaskdjfksadhfkasf/nadaver2' version 102.0.0 is identified as malicious. It contains a preinstall script that executes code during installation, which sends the installer's hostname and username to an attacker-controlled domain via DNS and HTTP requests. The package has no legitimate functionality and is used for host reconnaissance and data exfiltration at install time.