The 'chromestatus-openapi' npm package versions 69.69.69, 71.69.69, and 1.0.0 are identified as malicious. During installation, it runs an info stealer that targets npm, git, and CI/CD tokens by communicating with a domain linked to malicious activity. Systems with this package installed should be considered fully compromised, and all secrets and keys stored on those systems must be rotated immediately from a separate, secure device.