The npm package statist-browser-typed-client-eventea.projects.pwakasko version 0.0.1 is identified as malicious. Although no direct code patterns for credential theft, network exfiltration, or persistence were observed, the package is considered fully compromising to any system where it is installed. Complete system compromise is assumed, and all secrets and keys on affected systems should be rotated immediately. Removal of the package alone may not eliminate all malicious components introduced by its installation.