The 'ratelimitsucks3' package in the npm ecosystem has been identified as containing malicious code that results in a full system compromise. According to the source details, any system with this package installed or running should be considered fully compromised, implying that attackers may have gained extensive control over the affected system. The advisory strongly recommends rotating all secrets and keys from a separate, uncompromised system. Due to the nature of the compromise, simply uninstalling the package may not remove all malicious artifacts or backdoors introduced.

Systems with the 'ratelimitsucks3' package installed or running are considered fully compromised, meaning attackers potentially have full control over the system. This includes the risk of exposure or theft of all stored secrets and keys. The compromise is severe enough that remediation requires secret rotation from a different, trusted machine. Removing the package alone is insufficient to ensure complete removal of malicious software.

Remove the 'ratelimitsucks3' package immediately. Rotate all secrets and keys stored on the affected system from a separate, trusted computer. Because the system is fully compromised, consider rebuilding or thoroughly cleaning the affected environment to ensure removal of all malicious software. There is no known patch or fix for this package; the best mitigation is removal and secret rotation.