The npm package @hello.nrfcloud.com/proto-map versions 18.0.0 and 18.1.0 contain malicious code. Any computer with this package installed or running is considered fully compromised, with potential unauthorized control by an outside entity. Immediate rotation of all secrets and keys stored on the affected computer is recommended. Removing the package alone may not fully eliminate the malicious presence.