The 'ishowfeet3' package in the npm ecosystem is identified as containing malicious code. According to the source advisory, any system with this package installed should be considered fully compromised. The malicious code may allow attackers to gain full control over the affected computer, risking exposure of sensitive information such as secrets and keys. Due to the potential persistence of the attacker beyond the package removal, simply uninstalling the package does not guarantee remediation.

Full system compromise on any computer with the 'ishowfeet3' package installed or running. All secrets and keys stored on the compromised system are at risk and should be rotated immediately from a secure, unaffected machine. The attacker may maintain persistent access even after package removal.

Remove the 'ishowfeet3' package immediately from all affected systems. Rotate all secrets and keys stored on the compromised systems from a different, secure computer. Because the attacker may have established persistent control, consider a full system reinstallation or forensic analysis to ensure complete remediation.