The npm package 'pump-laserstream-parser' was found to contain malicious code or depend on a package with malicious code. Any system with this package installed or running should be considered fully compromised. Immediate removal of the package is advised, and all secrets and keys stored on the affected system must be rotated from a separate, secure machine. Due to the nature of the compromise, removing the package may not fully eliminate all malicious software introduced.