The npm package 'source-analyzer' versions 0.5.7, 0.5.8, and 0.5.9 contains malicious code or depends on a malicious package. Installing or running this package can lead to full compromise of the affected system, potentially exposing all stored secrets and keys. Immediate removal of the package and rotation of all secrets from a different, uncompromised system is strongly advised.