The npm package 'awesome-cli-logger' versions 1.0.0 and 1.2.0 contain malicious code. Any system with this package installed should be considered fully compromised, and all secrets and keys on that system must be rotated immediately from a different, secure machine. Removing the package alone does not guarantee removal of all malicious components or restoration of system integrity.