The npm package @gt-test-exp/profiler-exp-00000011 is identified as malicious code that compromises the host system completely. Installation or execution of this package results in full system compromise, potentially allowing an attacker full control. Due to the severity of the compromise, simply uninstalling the package may not remove all malicious artifacts or backdoors. The advisory recommends immediate rotation of all secrets and keys from a secure, unaffected machine to mitigate ongoing risk.

Any system with this package installed or running is considered fully compromised. Attackers may have obtained full control over the system, leading to potential unauthorized access to sensitive data, credentials, and system resources. Secrets and keys stored on the compromised system are at risk and should be rotated immediately. Removal of the package alone is insufficient to ensure system integrity.

Remove the @gt-test-exp/profiler-exp-00000011 package immediately. Rotate all secrets and keys stored on the affected system from a different, secure computer. Due to the likelihood of persistent compromise, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components.