The npm package 'ts-eslinter' version 1.0.0 is identified as malicious. It contains base64-encoded content that is suspicious and potentially used for obfuscated payload execution. The package name closely resembles legitimate ESLint/TypeScript tooling, which may lead to inadvertent installation. Installing or running this package can lead to full system compromise, requiring immediate secret and key rotation. Removal of the package alone may not fully remediate the compromise due to potential persistence of malicious software.