The nodemonjs package version 1.0.0 is identified as a malicious npm package containing multi-stage information-stealing malware. The malicious payload executes upon installation, potentially compromising the entire system. It may open a new terminal during execution. Systems with this package installed should be considered fully compromised, and all secrets and keys on the system should be rotated from a different, secure machine. Removal of the package alone does not guarantee elimination of all malicious software introduced.