The npm package jito-prop-exec was found to contain malicious code. Any system with this package installed or running should be considered fully compromised, with potential exposure of all stored secrets and keys. Immediate removal of the package and rotation of all secrets from a different, uncompromised system is strongly advised. However, removal of the package alone may not eliminate all malicious software introduced by it.