The npm package webpack-jsxcompile was found to contain malicious code. Installation or use of this package can lead to full compromise of the affected computer. Secrets and keys stored on the compromised system should be rotated immediately from a different, secure machine. Removal of the package alone may not eliminate all malicious software introduced by it.