The 'backup1-gg' package in the npm ecosystem is identified as malicious. Installation or execution of this package results in a full compromise of the affected computer, potentially allowing an attacker complete control. Due to the nature of the compromise, simply uninstalling the package does not guarantee removal of all malicious components. Immediate secret and key rotation from a different, uncompromised system is necessary to mitigate the impact.

Any system with the 'backup1-gg' package installed or running should be considered fully compromised. Attackers may have gained full control, risking exposure of all stored secrets and keys. The compromise extends beyond the package itself, as additional malicious software may have been installed, making remediation complex.

Remove the 'backup1-gg' package immediately. Rotate all secrets and keys stored on the compromised system from a separate, secure computer. Due to the potential for persistent malicious software beyond the package, consider a full system rebuild or forensic analysis to ensure complete remediation. No official patch or fix is available as this is a malicious package rather than a vulnerability in legitimate software.