The 'pasirianspirit' package in the npm ecosystem is identified as containing malicious code. Installation or execution of this package results in a full compromise of the host computer. The attacker potentially gains complete control, which may include exfiltration or manipulation of sensitive data such as secrets and keys. Due to the depth of compromise, remediation requires secret rotation from a secure environment and removal of the package, although removal alone may not fully restore system integrity.

Full system compromise on any computer with the package installed or running. All stored secrets and keys on the affected system are at risk and must be rotated. The attacker may maintain persistence beyond package removal, indicating a severe security breach.

Remove the 'pasirianspirit' package immediately from all affected systems. Rotate all secrets and keys stored on compromised machines from a separate, trusted device. Because the attacker may have established persistent control, consider rebuilding or thoroughly cleaning affected systems to ensure complete remediation.