The 'nottuff30' package in the npm ecosystem is identified as containing malicious code that fully compromises affected computers. According to the source details, any system with this package installed or running should be considered fully compromised. The malicious code potentially grants attackers full control over the system, risking exposure of all stored secrets and keys. Removal of the package is recommended but may not suffice to remove all malicious artifacts. No CVSS score or detailed technical exploit information is provided.

Full system compromise on any computer with the 'nottuff30' package installed or running. All secrets and keys stored on the system are at risk of exposure and should be considered compromised. The attacker may have persistent access beyond the presence of the package itself.

Remove the 'nottuff30' package immediately. Rotate all secrets and keys from a different, uncompromised computer to prevent unauthorized access. Because full system compromise is possible, consider rebuilding the affected system to ensure complete removal of malicious software. No official patch or fix is available; remediation relies on removal and secret rotation.