The npm package '@mc-xp/mc-monolith-js-src-package' version 99.9.1 is identified as malicious. It communicates with a domain linked to malicious activity, indicating potential compromise of any system where it is installed. Removal of the package is recommended, but full system compromise is possible, so secrets and keys should be rotated from a different, trusted machine.