The npm package 'black-moon-js' version 1.0.0 contains malicious code that communicates with a domain linked to malicious activity. Installation or execution of this package can lead to full compromise of the affected computer. Immediate removal of the package and rotation of all secrets and keys from a different, secure machine is strongly advised.