The npm package ethereum-lib-utils@1.3.7 is a malicious impersonation of the legitimate ethereumjs-util library. It includes a deliberately injected require statement that executes code from a hidden dependency, assertion-utils-js, when imported in Node.js environments. This results in full compromise of any system with the package installed or running. Immediate removal of the package and rotation of all secrets and keys is strongly advised.