The npm package sui-migration-audit-cli version 1.0.0 is identified as malicious. Although no install-time hooks or direct credential exfiltration mechanisms were observed in the scanned files, the package is considered fully compromising to any system where it is installed or running. Immediate removal of the package and rotation of all secrets and keys from a different, trusted system is strongly advised. There is no guarantee that removing the package will eliminate all malicious software introduced by its installation.