The npm package 'preview-server-auth' version 1.1.4 and later communicates with a domain linked to malicious activity. Installation or execution of this package results in a fully compromised system, potentially exposing all stored secrets and keys. Immediate removal of the package and rotation of all credentials from a separate, uncompromised system is strongly advised.