The 'acidic' package in the npm ecosystem is identified as containing malicious code that results in a full compromise of the host system. Installation or execution of this package grants an attacker complete control over the affected computer. Due to the severity of the compromise, it is recommended to consider all secrets and keys on the system as compromised and to rotate them from a secure environment. Removal of the package does not assure eradication of all malicious components introduced by the attacker.

Full system compromise on any computer with the 'acidic' package installed or running. Potential exposure and loss of all stored secrets and keys. Persistence of malicious software beyond package removal is likely, indicating a deep and severe security breach.

Immediately remove the 'acidic' package from all affected systems. Rotate all secrets and keys stored on compromised machines from a separate, secure computer. Assume the affected system is fully compromised and perform a thorough incident response, including system reimaging or replacement if necessary. There is no known patch or official fix; remediation relies on removal and secret rotation.