The npm package synqroomkit contains malicious code that compromises any computer on which it is installed or running. Such a compromise may allow an attacker full control over the affected system, risking exposure of all stored secrets and keys. Immediate removal of the package is advised, but due to the potential extent of the compromise, removal alone may not eliminate all malicious components.