The tailwind-scroller npm package version 1.0.2 contains malicious code. Any system with this package installed or running is considered fully compromised, potentially allowing an attacker full control. Immediate rotation of all secrets and keys stored on the affected system from a different, clean computer is strongly advised. Removing the package alone may not eliminate all malicious components due to possible persistent backdoors or additional malware.