The npm package 'some-tool-package' version 99.0.0 was identified as containing malicious code or relying on a dependency that contains malicious code. This malicious code can fully compromise any computer where the package is installed or executed. Due to the severity of the compromise, all secrets and keys on the affected system should be rotated from a separate, uncompromised device. Simply uninstalling the package does not guarantee removal of all malicious artifacts or backdoors introduced by the package.

Any system with 'some-tool-package' version 99.0.0 installed or running should be considered fully compromised. Attackers may have gained full control over the system, risking exposure of sensitive data such as secrets and keys. The compromise is severe enough that remediation requires key rotation and potentially full system remediation beyond package removal.

Remove the 'some-tool-package' version 99.0.0 immediately from all affected systems. Rotate all secrets and keys stored on compromised machines from a separate, secure computer. Due to the potential for persistent malicious software beyond the package itself, consider full system investigation and remediation. No official patch or fix is indicated; removal and key rotation are the primary mitigations.