The npm package '@ozon-complt/split' versions 99.0.2 and 99.0.4 contain malicious code that executes commands associated with malicious behavior. Any system with this package installed or running should be considered fully compromised. Immediate rotation of all secrets and keys stored on the affected system is recommended. Removing the package alone may not fully eliminate the malicious presence due to potential full control granted to an attacker.