The npm package 'abuden221' version 1.7.7 is identified as malicious. It is not a typical Node.js library but a static-site/web-proxy build with a service worker designed to manipulate browser behavior when deployed as a proxy. The package includes a script for mass-publishing under sequential names, indicating registry abuse. While installing the package does not execute harmful code on the installer side, running it in a browser environment can inject hostile scripts affecting users of the deployed proxy. The package misuse is primarily registry abuse rather than a direct supply-chain attack on npm installers. However, another source claims that any system with this package installed or running should be considered fully compromised, recommending immediate secret/key rotation and package removal.