The npm package file-type-detector versions 1.1.0 and 1.1.1 contain malicious code that writes a payload to a sibling package's log file and enables execution of that payload through a chain of dependencies. This results in full compromise of any computer running or having installed these versions. Immediate removal and secret/key rotation are strongly advised.