The npm package bcryptjs-node-js has been identified as containing malicious code. Systems with this package installed or running should be considered fully compromised. Immediate action is required to rotate all secrets and keys from a separate, secure computer. Removal of the package is recommended, but it may not fully eliminate the malicious presence due to potential full system compromise.