This threat involves a malicious npm package named @gt-test-exp/profiler-exp-00000010. Installation or execution of this package results in a full system compromise, granting attackers potential control over the affected computer. The advisory explicitly warns that removal of the package alone is insufficient to guarantee eradication of the malicious presence. Immediate secret and key rotation from a secure environment is recommended to mitigate ongoing risks.

Full compromise of the affected computer, including potential unauthorized access to all stored secrets and keys. The attacker may maintain persistent control beyond the presence of the malicious package itself, posing a significant risk to confidentiality, integrity, and availability of the system and its data.

Remove the malicious package @gt-test-exp/profiler-exp-00000010 from all affected systems. Immediately rotate all secrets and keys stored on the compromised machines from a separate, secure computer. Conduct a thorough investigation and remediation of the affected systems to identify and remove any additional malicious software or backdoors that may have been installed. Consider rebuilding or restoring systems from known good backups if full trust cannot be re-established.