The npm package fzreo-trading-sdk contains malicious code that compromises any computer on which it is installed or running. Installation of this package may lead to full system compromise, including unauthorized access to stored secrets and keys. Immediate removal of the package is advised, but full remediation requires rotating all secrets and keys from a different, uncompromised machine due to potential persistent control by an attacker.