The npm package 'svelte-kit-vim' was found to contain malicious code or dependencies with malicious code. Installation or use of this package may lead to full compromise of the affected computer. Secrets and keys stored on the compromised system should be rotated immediately from a separate, trusted device. Removing the package alone may not fully remediate the compromise due to potential persistence of malicious software.