The 'nottuff27' package in the npm ecosystem is identified as malicious. Installation or execution of this package results in a full compromise of the host system, potentially allowing an attacker complete control. Because the malicious code may install additional persistent threats, simply uninstalling the package is insufficient to restore system integrity. The advisory recommends treating any affected system as fully compromised and rotating all credentials from a separate, secure device.

Full system compromise on any computer with the 'nottuff27' package installed or running. All secrets and keys stored on the compromised system are at risk and should be rotated immediately. Removal of the package alone does not ensure removal of all malicious components.

Remove the 'nottuff27' package immediately. Treat affected systems as fully compromised and rotate all secrets and keys from a different, secure computer. Conduct a thorough investigation and remediation of the affected system as removal of the package alone may not eliminate all malicious software.