This threat involves a malicious npm package '@gt-test-exp/profiler-exp-00000006' identified by GHSA-jch9-93vc-f77v and cataloged as MAL-2026-10243. Installation or execution of this package results in full compromise of the affected computer, allowing an attacker potentially complete control. The advisory warns that removal of the package alone is insufficient to restore system integrity, as the attacker may have installed persistent malicious software. Immediate secret and key rotation is required from a separate, uncompromised system to mitigate ongoing risk.

Full system compromise on any computer with the package installed or running. All stored secrets and keys on the compromised system are at risk and must be rotated immediately. The attacker may maintain persistent access even after package removal, posing ongoing security risks.

Remove the '@gt-test-exp/profiler-exp-00000006' package immediately. Rotate all secrets and keys stored on the compromised machine from a different, secure computer. Conduct a thorough investigation and remediation of the affected system, as removal of the package alone does not guarantee elimination of all malicious software.