The npm package 'etherdjs' version 1.0.0 is identified as a malicious multi-stage information stealer. Upon installation, it executes a payload that opens a new terminal and compromises the host system. Any computer with this package installed should be considered fully compromised, and all stored secrets and keys must be rotated immediately from a different, secure machine. Removal of the package does not guarantee elimination of all malicious software introduced.