This threat involves a malicious npm package '@gt-test-exp/profiler-exp-00000002' identified by MAL-2026-10239. Installation or execution of this package results in full compromise of the host system, potentially allowing an attacker complete control. The advisory warns that removal of the package alone is insufficient to restore system integrity, as persistent malicious components may remain. Immediate secret and key rotation from a different, uncompromised system is required to mitigate ongoing risk.

Full system compromise on any computer with the package installed or running. All stored secrets and keys on the affected system are considered compromised and must be rotated. The attacker may maintain persistent access even after package removal, posing a severe ongoing threat.

Remove the '@gt-test-exp/profiler-exp-00000002' package immediately. Rotate all secrets and keys stored on the affected system from a different, secure computer. Because full system compromise is likely, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components.