The npm package 'abuden218' version 1.7.7 is identified as malicious. It is published under a deceptive identity and does not function as a legitimate library. Instead, it contains a static web-proxy application with heavily obfuscated JavaScript files and includes a shell script for mass republishing under different names. Installing this package does not execute code immediately but leads to registry pollution and consumer deception. According to one source, any system with this package installed should be considered fully compromised, and all secrets and keys on that system should be rotated. The package should be removed, but removal may not fully eliminate malicious presence.