The npm package @an1mshnpmb9c84920/oidc-cross-cafb9d929e version 1.0.0 is identified as malicious. Although its code does not explicitly perform actions such as reading installer secrets, fetching or executing remote code, or opening backdoors, it is considered a severe threat. Installation of this package implies full compromise of the host system, requiring immediate secret and key rotation from a different machine. Removal of the package alone may not eliminate all resulting malicious software.