The 'sixseven4' npm package has been identified as containing malicious code that compromises the host system completely. According to the source advisory, any system with this package installed should be considered fully compromised, with potential unauthorized control granted to an external entity. The advisory warns that simply removing the package may not remove all malicious artifacts. There is no CVSS score or detailed technical vulnerability information available. No known exploits in the wild have been reported yet.

Full system compromise on any computer where the 'sixseven4' package is installed or running. All secrets and keys stored on the affected system are at risk and should be considered compromised. The malicious code may allow an attacker to maintain persistent unauthorized access beyond removal of the package.

Remove the 'sixseven4' package immediately. Rotate all secrets and keys stored on the affected system from a different, trusted computer. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious software. No official patch or fix is available; remediation relies on removal and secret rotation.