The npm package 'period-newline' version 0.1.0 was published with malicious code by the threat actor 'ryanmccollum1'. This package impersonates a benign text-formatting utility but is part of a supply chain attack campaign that also includes the 'redeem-onchain-sdk' package. The malicious code collects sensitive data such as SSH keys, AWS credentials, .npmrc tokens, Docker authentication data, Chrome saved logins, .env files, and git history, then exfiltrates this information over a raw TCP socket to a command-and-control server hosted on AWS.