The npm package orderly-network-config was found to contain malicious code. Any system with this package installed or running is considered fully compromised, potentially exposing all stored secrets and keys. Immediate removal of the package and rotation of all secrets from a different, uncompromised system is strongly advised. However, due to the nature of the compromise, removing the package may not eliminate all malicious software introduced.