The npm package dezcord.js version 1.0.0 is identified as a malicious multi-stage information stealer. Upon installation, it executes a payload that opens a new terminal and compromises the host system. Any computer with this package installed should be considered fully compromised, and all secrets and keys stored on that computer must be rotated immediately from a different, secure machine. Removing the package alone does not guarantee removal of all malicious software introduced by it.