This package has a preinstall script to download an execute a Go-variant of the Cobalt Strike beacon.
{ "malicious-packages-origins": null }
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/flybook-table/MAL-2024-12182.json"