The npm package vczxijghsvizu4 version 1.0.0 is identified as malicious. Although static analysis and behavior tracing did not detect direct harmful mechanisms such as exfiltration or backdoors, the package is considered fully compromising to any system where it is installed or running. Removal of the package does not guarantee elimination of all malicious components, and immediate rotation of all secrets and keys from a separate, uncompromised system is advised.