The npm package @lumen-labs-dev/whisper-node version 0.5.1 is identified as malicious. Installation of this package can lead to full compromise of the affected computer, potentially exposing all stored secrets and keys. Immediate removal of the package and rotation of all credentials from a separate, uncompromised device is strongly advised.