The 'imillegal5' package in the npm ecosystem is identified as malicious software. According to the source details, any system with this package installed should be considered fully compromised. The attacker may have gained full control over the system, potentially accessing sensitive information such as secrets and keys. Immediate rotation of all credentials from a separate, secure machine is advised. Due to the potential persistence of the attacker beyond the package removal, complete remediation may require thorough system investigation and recovery.

Systems with the 'imillegal5' package installed are fully compromised, risking exposure of all stored secrets and keys. The attacker may maintain persistent access even after package removal, leading to ongoing unauthorized control and data theft.

Remove the 'imillegal5' package immediately. Rotate all secrets and keys from a different, uncompromised computer. Because full system compromise is likely, consider a full system audit and reinstallation to ensure removal of all malicious components. No official patch or fix is available; remediation relies on removal and credential rotation.