The npm package @zahlen/checkout version 0.2.2 is identified as malicious. Installing or running this package can lead to a full compromise of the affected computer. The package does not exhibit typical malicious behaviors such as remote code fetching or credential scraping, but its presence indicates a high risk. Immediate removal of the package and rotation of all secrets and keys from a different, uncompromised computer is strongly recommended.