The npm package 'iwsdk' version 22.0.0 contains malicious code or depends on a malicious package. Installation or execution of this package can lead to full system compromise. Any secrets or keys stored on the affected system should be rotated immediately from a secure environment. Removing the package alone may not fully eliminate the threat as the attacker may have persistent control over the system.