The npm package frank-newton3-db-final contains malicious code. Any system with this package installed or running should be considered fully compromised. Secrets and keys stored on the affected system must be rotated immediately from a different, secure machine. Removing the package alone does not guarantee removal of all malicious software introduced by it.