The npm package 'caphsmgiwy' versions 1.0.0 and 1.0.1 contain malicious code or depend on a malicious package. Installing or running this package can lead to a full compromise of the affected computer, risking exposure of all stored secrets and keys. Immediate removal of the package and rotation of all secrets from a different, secure computer is strongly advised.