The npm package 'ttspc-server-sample' versions 9.0.0, 9.0.1, 99.9.0, 99.9.1, 99.9.2, and 99.9.3 contains malicious code that executes automatically upon installation. It collects sensitive system information including hostname, username, environment variables resembling credentials, network interface details, OS information, and running processes, then exfiltrates this data to an attacker-controlled domain. The package uses an inflated version number to override private internal packages, enabling a supply-chain attack. Systems with this package installed should be considered fully compromised, and all secrets should be rotated. Removal of the package alone may not fully remediate the compromise.