The npm package jito-shred-propo-excutor contains malicious code that compromises any computer on which it is installed or running. Such a compromise may lead to full control by an outside entity, risking exposure of all stored secrets and keys. Immediate removal of the package is advised, but this may not eliminate all malicious software introduced. Secrets and keys should be rotated from a separate, uncompromised system.