The npm package chai-proxify was found to contain malicious code. Installation or execution of this package can lead to a full compromise of the affected computer. Secrets and keys stored on the compromised system should be rotated immediately from a different, secure device. Removing the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control.