The npm package @kl-dolphin/jump version 2.0.0 contains malicious code or depends on a package with malicious code. Installation or execution of this package can lead to full compromise of the affected system. Systems with this package installed should be considered fully compromised, and all secrets and keys stored on them must be rotated immediately from a separate, secure system. Simply removing the package may not eliminate all malicious software introduced by it.