The dizcordjs npm package version 1.0.0 is identified as a malicious multi-stage information stealer. The malicious payload executes upon installation, opening a new terminal and potentially compromising the host system. Any computer with this package installed should be considered fully compromised, and all secrets and keys stored on that computer must be rotated immediately from a separate, secure device. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.