The 'ishowfeet5' package in the npm ecosystem is identified as malicious software. According to the source details, any system with this package installed should be considered fully compromised. The malicious code potentially grants full control of the computer to an attacker. Due to the severity of the compromise, simply removing the package may not fully remediate the infection. The advisory recommends rotating all secrets and keys from a separate, secure system to mitigate ongoing risk.

Full compromise of the affected computer is expected, including potential unauthorized access to all stored secrets and keys. The presence of the package implies that attackers may have gained persistent control over the system. This can lead to data theft, credential exposure, and further malicious activity. Removal of the package alone is insufficient to ensure system integrity.

Remove the 'ishowfeet5' package immediately from all affected systems. Rotate all secrets, keys, and credentials from a different, uncompromised computer to prevent further unauthorized access. Conduct a thorough investigation and consider rebuilding the affected systems to ensure complete removal of malicious components, as the package removal alone does not guarantee full remediation.