The 'abuden217' package in the npm ecosystem has been identified as containing malicious code that can fully compromise a host system. According to the source advisory, any computer with this package installed should be considered fully compromised, necessitating immediate rotation of all secrets and keys from a separate, secure machine. The package removal is recommended but may not fully remediate the infection due to potential persistent backdoors or additional malware installed by the attacker. No CVSS score or patch information is available, and no known exploits in the wild have been reported.

Full system compromise on any computer with the 'abuden217' package installed. All secrets and keys stored on the compromised machine are at risk and should be rotated immediately. The attacker may maintain persistent access beyond the presence of the package itself.

Remove the 'abuden217' package immediately. Rotate all secrets and keys from a different, uncompromised machine. Because full system compromise is likely, consider rebuilding the affected system from a trusted backup or reinstalling the operating system to ensure complete remediation. No official patch or fix is available.