The 'workspace-scripts' npm package is identified as malicious software that, when installed or executed, fully compromises the host computer. This compromise potentially grants an attacker full control over the system, including access to sensitive credentials and keys. Due to the depth of the compromise, simply uninstalling the package does not guarantee removal of all malicious components. The advisory recommends treating any system with this package as fully compromised and taking immediate remediation steps such as secret rotation from a different machine.

Any system with the 'workspace-scripts' package installed or running should be considered fully compromised. Attackers may have gained full control over the system and access to all stored secrets and keys. This poses a severe risk to confidentiality, integrity, and availability of the affected system and any connected resources relying on compromised credentials.

Remove the 'workspace-scripts' package immediately. Treat the affected system as fully compromised and rotate all secrets and keys from a separate, trusted computer. Because full control may have been given to an attacker, additional forensic analysis and system remediation may be necessary to ensure complete removal of malicious software. No official patch or fix is available; remediation relies on removal and secret rotation.