The npm package chmjdsidwlf5 version 1.0.0 is identified as malicious. Although static analysis and behavior tracing did not detect typical harmful actions such as exfiltration or remote code execution, the package is considered fully compromising to any system where it is installed or running. Removal of the package alone may not restore system integrity, and all secrets and keys on the affected system should be rotated from a different, uncompromised device.