The @marketfront/navbar npm package version 7.0.0 is part of a malicious campaign involving 25 packages published within a short timeframe. It contains a heavily obfuscated postinstall script that harvests sensitive credentials from the installing environment and exfiltrates them via encrypted HTTPS and DNS channels. The package masquerades as a legitimate internal logger but lacks functional library code. The attack targets developer and CI environments, risking compromise of cloud tokens, npm credentials, and other secrets.