The npm package @source-row/source-container version 99.9.1 contains malicious code that communicates with a domain linked to malicious activity. Installing or running this package may fully compromise the affected computer. Secrets and keys stored on the compromised system should be rotated immediately from a different, secure machine. Removing the package alone may not eliminate all malicious software introduced by it.