The ng-search-api package distributed via npm has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host system, potentially allowing an attacker complete control. Due to the severity of the compromise, simply uninstalling the package may not remove all malicious artifacts or backdoors. The advisory recommends immediate rotation of all credentials from a separate, uncompromised system to mitigate ongoing risk.

Full system compromise on any computer with the ng-search-api package installed or running. All secrets and keys stored on the compromised system are at risk and should be considered exposed. The presence of the package implies potential persistent malicious control beyond the package itself.

Remove the ng-search-api package immediately from all affected systems. Rotate all secrets, keys, and credentials stored on the compromised systems from a different, secure computer. Because full control may have been given to an attacker, further forensic analysis and remediation may be necessary to ensure complete removal of malicious software.