The npm package 'nottuff13' contains malicious code that can fully compromise any computer on which it is installed or running. This compromise may allow an attacker to gain full control over the affected system. Removal of the package does not guarantee elimination of all malicious components. Immediate rotation of all secrets and keys stored on the compromised machine from a different, secure device is strongly advised.