The marked-prettier package on npm has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the affected computer, potentially allowing an attacker complete control. Due to the nature of the compromise, secrets and keys stored on the system are at risk and must be rotated immediately from a different, secure machine. The package removal is necessary but insufficient to fully remediate the infection, as additional malicious artifacts may persist.

Full system compromise on any computer with the marked-prettier package installed or running. All stored secrets and keys on the system are exposed and must be rotated. The attacker may maintain persistent access beyond the presence of the package itself.

Remove the marked-prettier package immediately. Rotate all secrets and keys stored on the affected system from a separate, trusted computer. Conduct a thorough investigation and remediation of the affected system to identify and remove any additional malicious software introduced by the package installation.