The npm package @pkgship/frpc-linux-arm64 version 0.71.0 contains malicious code. It is a platform-specific distribution that installs a prebuilt native binary for Linux ARM64 systems. Although the package does not execute code during installation or perform network callbacks, its presence indicates a full compromise of the affected system. Any computer with this package installed should be considered fully compromised, and all secrets and keys on that system should be rotated immediately. Removal of the package alone may not eliminate all malicious software introduced.