The 'abuden4' package in the npm ecosystem is identified as containing malicious code that fully compromises affected systems. According to the source details, any computer with this package installed should be considered fully compromised, necessitating immediate rotation of all secrets and keys from a different, secure machine. The package removal is recommended but may not suffice to remove all malicious artifacts or backdoors introduced by the attacker. No CVSS score or detailed technical exploit information is provided, but the threat is severe due to the potential for complete system takeover.

Full compromise of affected computers, including potential unauthorized access to all stored secrets and keys. The malicious package may enable attackers to maintain persistent control beyond the presence of the package itself. This poses a critical risk to confidentiality, integrity, and availability of the system and its data.

Remove the 'abuden4' package immediately from affected systems. Rotate all secrets and keys from a secure, uncompromised machine. Because full system compromise is likely, consider rebuilding the affected systems to ensure complete removal of malicious components. Monitor for any suspicious activity and apply organizational incident response procedures.