The npm package @regex33-hackerone/tb-compat version 1.0.0 is identified as malicious software. Despite scans showing no detected malicious behavior in the package files themselves, the presence of this package on any computer indicates a full system compromise. It is recommended to remove the package and immediately rotate all secrets and keys from a different, uncompromised machine. There is no guarantee that removing the package will eliminate all malicious software resulting from its installation.