The npm package @fyxzpediaa/libsignal is identified as containing malicious code. Any system with this package installed or running is considered fully compromised, with potential unauthorized control by an attacker. Immediate rotation of all secrets and keys stored on the affected system is recommended. Removal of the package alone may not eliminate all malicious components due to possible persistent control established by the attacker.