The npm package salli-tg-api contains malicious code that can fully compromise any computer on which it is installed or running. This compromise may allow an attacker to gain full control over the system, potentially exposing all stored secrets and keys. Immediate removal of the package and rotation of all secrets from a different, uncompromised machine is strongly advised.