The npm package sui-graphql-client versions 0.1.0 and 0.2.0 have been identified as malicious. Although static and behavioral scans did not detect typical malicious behaviors such as remote code execution or credential theft, the package is considered fully compromising any system on which it is installed. Immediate removal of the package and rotation of all secrets and keys from a separate, uncompromised system is strongly advised.