The 'esm-package' npm package versions 7.0.1, 7.0.2, and 1.1.0 have been identified as malicious. This package communicates with domains linked to malicious activity and executes commands associated with harmful behavior. Any system with this package installed should be considered fully compromised, and all secrets and keys stored on the system must be rotated immediately from a secure, unaffected machine. Removing the package alone may not eliminate all malicious components due to potential full system compromise.