The npm package 'axois-utils' is a malicious package designed to steal sensitive user data during installation. It uses install hooks to execute a script that collects SSH keys, cloud credentials, shell histories, browser profiles, crypto wallet files, environment variables, and recursively searches common development directories for .env files. The stolen data is sent unencrypted to a hardcoded command-and-control server. The package has no legitimate functionality and explicitly identifies its users as 'victims' in the source code comments.