The npm package middleware-jwt version 1.0.0 contains malicious code or depends on a package with malicious code. Installing or running this package can fully compromise the affected system. Secrets and keys stored on the compromised system should be rotated immediately from a different, trusted machine. Simply removing the package may not eliminate all malicious software introduced by it.