The 'nottuff28' package in the npm ecosystem is identified as malicious. According to the source advisory, any system with this package installed should be considered fully compromised. Attackers may have gained full control, potentially accessing and exfiltrating sensitive information such as secrets and keys. Because of the depth of compromise, simply uninstalling the package does not guarantee removal of all malicious artifacts or backdoors introduced by the attacker.

Full system compromise on any computer with the 'nottuff28' package installed or running. Potential exposure and theft of stored secrets and keys. Persistent attacker control may remain even after package removal, posing ongoing risk to system integrity and confidentiality.

Immediately remove the 'nottuff28' package from all affected systems. Rotate all secrets and keys that were stored on compromised machines, using a different, trusted computer to do so. Consider the affected systems fully compromised and perform thorough incident response and forensic analysis to identify and remove any additional malicious software or backdoors. No official patch or fix is available; remediation relies on removal and recovery procedures.