The npm package 'mmpp' versions 1.0.1 and 1.0.2 have been identified as malicious. Installation or execution of this package can lead to full compromise of the affected computer. The package communicates with a domain linked to malicious activity, indicating potential unauthorized control or data exfiltration. Immediate removal of the package is recommended, but due to possible persistent compromise, all secrets and keys on the affected system should be rotated from a separate, trusted device.