The npm package 'file-saver-bg' contains malicious code that fully compromises any computer on which it is installed or running. The compromise allows an attacker to gain full control over the affected system. Immediate rotation of all secrets and keys stored on the compromised computer is advised, using a different, clean machine. Removing the package alone does not guarantee removal of all malicious software introduced by it.