The npm package '@tableau__catalog-messages/database_lower' version 99.9.9 has been identified as containing malicious code. This package communicates with a domain linked to malicious activity, indicating it is designed to compromise systems where it is installed. Systems with this package installed should be considered fully compromised, and all secrets and keys stored on those systems should be rotated immediately from a secure, unaffected device. Removal of the package alone may not eliminate all malicious software introduced by it.