The npm package 'lowkirkuenly' was found to contain malicious code or depend on a malicious package. Any system with this package installed should be considered fully compromised, and all stored secrets and keys must be rotated immediately from a different machine. Removing the package alone may not eliminate all malicious software introduced by its installation.