The crossmint-wallets-sdk npm package version 1.0.0 is a malicious package impersonating a legitimate wallet SDK. It contains preinstall and index scripts that execute automatically during installation, collecting host identifiers and exfiltrating them to a hardcoded external server. This behavior allows attackers to perform reconnaissance and potentially gain control over the affected system. Systems with this package installed should be considered fully compromised, and all secrets and keys must be rotated from a secure environment. Removal of the package alone does not guarantee eradication of all malicious components.