The npm package svelte-visual-map version 1.0.0 contains malicious code. Installation or execution of this package can lead to a full compromise of the affected system. Secrets and keys stored on the compromised system should be rotated immediately from a separate, secure machine. Removal of the package alone may not fully remediate the compromise due to potential additional malicious software installed.