The ethetsjs npm package version 1.0.0 is identified as a malicious multi-stage information stealer. Upon installation, it executes a payload that opens a new terminal and compromises the host system. Any computer with this package installed should be considered fully compromised, and all secrets and keys stored on that machine must be rotated immediately from a different, secure device. Removal of the package alone does not guarantee elimination of all malicious software introduced.