The npm package @crvouga/mockingbird-service-microsoft version 0.14.0 contains malicious code. Any computer with this package installed or running is considered fully compromised. It is recommended to remove the package and immediately rotate all secrets and keys from a different, uncompromised machine. However, removal of the package alone may not eliminate all malicious software introduced by it.