This threat involves a malicious npm package named 'dowload_ebok_programming_in_haskell_second_edition_by_graham_hutton_c19wm'. Installation or execution of this package results in full system compromise, allowing attackers potential control over the affected computer. The package is identified as malicious by the GHSA advisory GHSA-7cqx-w44w-2w4m and is cataloged under MAL-2026-10123. There is no CVSS score available, and no patch or remediation beyond removal and secret rotation is indicated. The vendor or source does not provide an official fix, and no cloud service is involved.

Full compromise of any computer with this package installed or running. Attackers may gain complete control, potentially accessing or exfiltrating all stored secrets and keys. The system's integrity and confidentiality are severely impacted. Removal of the package does not ensure removal of all malicious artifacts, indicating persistent infection risk.

Remove the malicious package immediately. Rotate all secrets and keys stored on the affected computer from a separate, trusted machine to prevent unauthorized access. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected environment. No official patch or fix is available; mitigation relies on removal and secret rotation.