The npm package @ceeferenderer/fe-renderer-sdk contains malicious code that executes both during installation and runtime. It uses obfuscated code to dynamically load modules and exfiltrate sensitive environment information such as the OS username, hostname, and current working directory via DNS queries to an attacker-controlled domain. The package's behavior includes silent error handling and evasion techniques, indicating clear malicious intent. Systems with this package installed should be considered fully compromised.