The npm package 'better-md' version 99.0.0 contains malicious code or depends on a package with malicious code. Installing or running this package can lead to full compromise of the affected computer. Secrets and keys stored on the compromised system should be rotated immediately from a separate, trusted device. Removal of the package alone may not fully eliminate the malicious presence.