The npm package @ethersphere/bee-js version 13.3.0 contains malicious code. Any system with this package installed or running is considered fully compromised, with potential unauthorized access to all secrets and keys stored on the machine. Immediate removal of the package and rotation of all secrets from a different, uncompromised device is strongly advised. However, removal of the package alone may not eliminate all malicious software introduced by the compromise.