The pino-deploy npm package versions 0.0.1, 0.0.2, and 1.0.0 contain malicious code. Any system with this package installed or running should be considered fully compromised, as the malicious code may have given an attacker full control. It is recommended to remove the package and immediately rotate all secrets and keys from a different, trusted system. However, removing the package may not fully eliminate the malicious presence on the system.