The npm package 'howmanygreatbritain' contains malicious code or depends on a malicious package. Any system with this package installed or running should be considered fully compromised. Secrets and keys stored on affected systems must be rotated immediately from a different, clean computer. Removing the package alone may not eliminate all malicious software introduced by it.