This threat involves a malicious npm package '@gt-test-exp/profiler-exp-00000008' identified by MAL-2026-10244. Installation or execution of this package results in a full system compromise, potentially allowing attackers to control the affected computer. The advisory warns that simply removing the package may not eradicate all malicious components introduced. Consequently, all sensitive credentials stored on the compromised system should be rotated immediately from a separate, trusted device. No CVSS score or detailed technical exploit information is provided.

Any system with this package installed or running should be considered fully compromised. Attackers may have gained full control over the system, risking exposure or theft of all stored secrets and keys. The persistence of malicious code beyond the package itself means that system integrity cannot be assured by package removal alone.

Remove the '@gt-test-exp/profiler-exp-00000008' package immediately. Rotate all secrets and keys stored on the affected computer from a different, secure machine. Because full system compromise is possible, consider rebuilding the affected system from a known good backup or reinstalling the operating system to ensure complete removal of malicious software.