The npm package '@sbt_gitverse/analytics-client' versions 99.0.3, 99.0.4, 99.0.5, and 99.0.7 contain malicious code that executes commands associated with harmful behavior. Installation or use of this package can lead to full compromise of the affected computer, potentially exposing all stored secrets and keys. Removal of the package does not guarantee elimination of all malicious software introduced.