The npm package 'react-video-canvas' at version 9999.9999.10000 is a malicious typosquatting package used in a dependency confusion campaign by the threat actor 'saif777'. It executes a postinstall script that collects detailed system information and exfiltrates it via a Discord webhook. The package includes sandbox detection to differentiate real machines from analysis environments. Installation of this package compromises the host system, potentially exposing all stored secrets and keys.