The npm package @hrmony/organisationsverwaltung version 7.99.0 contains malicious code that executes immediately upon import or require. It exfiltrates AWS IAM credentials, environment variables, and Kubernetes secrets by sending them to a hardcoded external server. This package is a dependency-confusion attack targeting an internal namespace. Systems with this package installed should be considered fully compromised, and all secrets should be rotated from a clean environment.