The yzx-npm package versions 1.0.0 and 1.0.1 contain malicious code that can fully compromise any computer on which it is installed or running. This compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Removal of the package alone may not eliminate all malicious components, as the attacker may have established persistent control.