The npm package obfus-jsxy version 3.2.0 contains malicious code or depends on a package with malicious code. Any system with this package installed should be considered fully compromised, requiring immediate secret and key rotation from a different machine. Removal of the package alone may not eliminate all malicious software resulting from its installation.