The @amtrav/webservice npm package is identified as containing malicious code that fully compromises affected systems. According to the source details, any computer with this package installed or running should be considered fully compromised, with potential unauthorized access to stored secrets and keys. The package removal does not assure complete remediation due to possible persistence of malicious software. No patch or fix is available, and no known exploits in the wild have been reported. This is a supply chain compromise through a malicious package in the npm ecosystem.

Full compromise of any computer with the @amtrav/webservice package installed or running. Potential unauthorized access and exfiltration of secrets and keys stored on the system. Persistence of malicious software beyond package removal is possible, increasing risk of ongoing compromise.

Remove the @amtrav/webservice package immediately. Rotate all secrets and keys stored on the affected computer from a separate, trusted machine. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected environment. No official patch or fix is available; remediation relies on removal and secret rotation.