The npm package 'kojs0k' contains malicious code that compromises any computer on which it is installed or running. Installation of this package results in a full system compromise, risking all stored secrets and keys. Immediate rotation of all credentials from a separate, uncompromised system is advised. Removal of the package alone does not guarantee elimination of all malicious software introduced.