The npm package 'motiondnb' contains malicious code that fully compromises any computer on which it is installed or running. Immediate rotation of all secrets and keys stored on the affected computer is recommended, using a different, uncompromised machine. Removal of the package is advised, but there is no guarantee that all malicious software introduced by the package will be eradicated by removal alone.