The aone-cloud-cli npm package contains malicious code that compromises any computer on which it is installed or running. Installation of this package results in full compromise of the affected system, potentially exposing all stored secrets and keys. Immediate removal of the package is recommended, but full remediation may require system rebuild due to possible persistent malicious software. Secrets and keys should be rotated from a separate, uncompromised device.