The npm package 'near-abi-client-js' version 1.1.0 has been identified as malicious. It communicates with a domain linked to malicious activity, indicating potential compromise of any system where it is installed. Removal of the package alone may not fully remediate the threat, as the system could be fully compromised.