The 'nottuff22' package in the npm ecosystem is identified as containing malicious code that compromises the host system completely. Installation or execution of this package results in full system compromise, potentially allowing an attacker to control the affected computer. Due to the severity of the compromise, simply uninstalling the package is insufficient to ensure system integrity, as additional malicious software may persist. The advisory recommends immediate secret and key rotation from a different, secure computer to mitigate the impact.

Full compromise of any computer with the 'nottuff22' package installed or running. All secrets and keys stored on the compromised machine are at risk and must be rotated. Removal of the package alone does not guarantee removal of all malicious components introduced by the package.

Remove the 'nottuff22' package immediately. Rotate all secrets and keys stored on the compromised computer from a separate, secure device. Because full system compromise is possible, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious software.