The npm package @gt-test-exp/profiler-exp-00000009 is identified as containing malicious code that fully compromises the host system. Installation or execution of this package results in a complete system compromise, potentially allowing an attacker to access all stored secrets and keys. Due to the nature of the compromise, simply uninstalling the package is insufficient to ensure system integrity, as additional malicious software or backdoors may remain. Immediate secret rotation from a secure environment is recommended to mitigate risk.

Full system compromise on any computer with the package installed or running. All stored secrets and keys on the affected system are at risk and should be considered compromised. The attacker may have persistent access beyond the presence of the package itself.

Remove the @gt-test-exp/profiler-exp-00000009 package immediately. Rotate all secrets and keys stored on the affected system from a different, trusted computer. Because full system compromise is possible, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components.