Fourteen npm packages published from throwaway accounts in the testmetest campaign install a self-propagating, Shai-Hulud-derived worm. Most of them use a command expansion in binding.gyp that makes node-gyp execute an obfuscated index.js loader at install time; the payload steals SSH keys, registry, cloud and CI credentials, .env files and browser logins, republishes itself through the victim's package-registry accounts, spreads over SSH, and deletes the home directory when its stolen GitHub token is rejected. Three later packages (@iobandamwer/cache-helper, @iobandamwer/native-helper and path-stream-utils-testmetest) ship a precompiled native addon instead: a postinstall hook loads it, it XOR-decrypts a hidden .napi_cache file into JavaScript and runs it detached, and it stays dormant on CI runners, containers, small VMs and machines with a debugger or analysis tool attached.