The agui-session-recorder npm package contains malicious code that can fully compromise any computer on which it is installed or running. This compromise may allow an attacker to gain complete control over the affected system. Immediate removal of the package is advised, but due to potential persistent malicious software, full remediation may require additional measures such as rotating all secrets and keys from a separate, uncompromised device.