The npm package sdk-utils-testmetest version 1.0.0 is identified as malicious software. Although the package itself does not exhibit install-time execution or network activity, its installation compromises the host computer fully. Any secrets or keys stored on the compromised machine should be rotated immediately from a separate, secure device. Removal of the package alone may not eliminate all malicious components due to potential full system compromise.