The npm package @pkgship/frpc-linux-amd64 version 0.71.1 contains malicious code. Although it ships a prebuilt binary without suspicious lifecycle scripts or network activity during installation, the package is identified as malware. Any system with this package installed or running should be considered fully compromised, requiring immediate secret and key rotation and package removal. However, removal may not guarantee complete eradication of malicious software.