The 'sixseven3' package in the npm ecosystem is identified as malicious software. According to the source, any computer with this package installed should be considered fully compromised. The malicious code potentially grants an attacker full control over the system, risking exposure of sensitive information such as secrets and keys. Due to the depth of compromise, simply uninstalling the package may not remove all malicious components. There is no CVSS score or detailed technical vulnerability data available. No known exploits in the wild are reported at this time.

Full system compromise on any computer with the 'sixseven3' package installed. Exposure and potential theft of all secrets and keys stored on the affected system. Persistent malicious presence may remain even after package removal, indicating a high risk of ongoing unauthorized access.

Remove the 'sixseven3' package immediately from all affected systems. Rotate all secrets, keys, and credentials from a separate, trusted computer to prevent further unauthorized access. Conduct a thorough security assessment and remediation of the affected systems, as removal of the package alone may not eliminate all malicious software. Monitor for any suspicious activity and consider rebuilding compromised systems if necessary.