The fastnodemailer npm package versions 8.0.2, 8.0.3, and 8.0.4 contain malicious code. Any system with this package installed or running is considered fully compromised. It is recommended to remove the package and immediately rotate all secrets and keys from a different, trusted computer. However, removal of the package alone may not eliminate all malicious software introduced by it.