The 'abuden214' package in the npm ecosystem is identified as malicious software. Installation or execution of this package results in full compromise of the host system, potentially allowing an attacker complete control. Due to the nature of the compromise, simply uninstalling the package may not remove all malicious artifacts or backdoors. This threat is documented under MAL-2026-10257 and GHSA-c3vr-r9ph-97h4. No specific versions are identified as affected, implying the package itself is inherently malicious.

Full system compromise on any computer with the 'abuden214' package installed or running. All secrets and keys stored on the compromised system are at risk and should be considered exposed. The attacker may maintain persistent access beyond removal of the package.

Remove the 'abuden214' package immediately. Rotate all secrets and keys from a separate, trusted system to prevent further unauthorized access. Because the system may remain compromised after removal, consider full system reimaging or forensic analysis to ensure eradication of malicious components. No official patch or fix is available as this is a malicious package rather than a vulnerability with a patch.