The progerss-cli npm package is a typosquatting malicious package impersonating the legitimate cli-progress package. It contains an obfuscated payload executed automatically upon installation, which collects data and exfiltrates it via HTTP using the form-data dependency. The package delays payload execution until dependencies are fully installed to evade naive detection. Installation of this package can lead to full system compromise.