The npm package '@gt-test-exp/profiler-exp-00000001' is identified as containing malicious code that compromises the host system completely. According to the source advisory, installation or execution of this package results in full system compromise, potentially allowing attackers to gain control and access to sensitive information. Because the attacker may have established persistent access, simply uninstalling the package may not remove all malicious components. This threat is classified as a malicious package within the npm ecosystem and is tracked under MAL-2026-10238 and GHSA-vj45-v39j-8wrg. No CVSS score or patch information is available.

Any system with this package installed or running should be considered fully compromised. Attackers may have gained full control over the system, including access to all stored secrets and keys. This can lead to data breaches, unauthorized access, and further system manipulation. The presence of this package poses a critical security risk.

Remove the '@gt-test-exp/profiler-exp-00000001' package immediately. Rotate all secrets and keys stored on the compromised system from a secure, separate machine. Because full control may have been given to an attacker, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious artifacts. No official patch or fix is available; remediation relies on removal and secret rotation.