The npm package @k18k/entrypoint-sdk-linux-x64 versions 0.2.0 and 0.2.1 contain malicious code. Installation or execution of this package can lead to full system compromise. Users should consider any system with this package installed as fully compromised and rotate all secrets and keys from a different machine. Removal of the package does not guarantee removal of all malicious software introduced.