The npm package '@tw-models/storage' versions 99.0.1, 99.0.2, and 99.0.4 contain malicious code that executes commands associated with malicious behavior. Systems with this package installed or running should be considered fully compromised. Immediate removal of the package and rotation of all secrets and keys from a different, secure computer is strongly advised. However, removal of the package may not fully eliminate all malicious software installed as a result of this compromise.