The npm package statist-browser-typed-client-eventea.projects.pwainsurance version 0.0.1 is identified as malicious. Although automated scanning did not find typical supply-chain attack patterns or credential-harvesting code, the package is considered fully compromising any system where it is installed. Immediate removal of the package and rotation of all secrets and keys from a different machine are strongly recommended. There is no guarantee that removing the package will eliminate all malicious components due to potential full system compromise.