The npm package @lambda-platform/lambda-vue version 3.3.24 contains malicious code. Although static and dynamic analysis did not detect direct signs of exfiltration or remote code execution, the package is considered fully compromising any system on which it is installed. Immediate removal of the package and rotation of all secrets and keys from a different, uncompromised system is strongly advised.