The 'nottuff10' package in the npm ecosystem is identified as containing malicious code. Installation or execution of this package results in full compromise of the affected computer, potentially allowing an attacker complete control. Due to the severity of the compromise, secrets and keys stored on the system must be rotated immediately from a different, uncompromised device. Removal of the package is recommended but may not fully eradicate all malicious components introduced during its presence.

Full system compromise on any computer with the 'nottuff10' package installed or running. All stored secrets and keys on the compromised system are at risk and must be considered exposed. The attacker may have persistent access beyond the presence of the package itself.

Remove the 'nottuff10' package immediately. Rotate all secrets and keys from a separate, secure computer. Because the system may be fully compromised, consider rebuilding the affected system from a known good state to ensure complete removal of malicious software. No official patch or fix is available; remediation relies on removal and secret rotation.