The 'sixseven9' package in the npm ecosystem is identified as containing malicious code that compromises the host system completely. According to the source advisory, any computer with this package installed should be considered fully compromised. The malicious code potentially grants full control to an external attacker, risking exposure of all sensitive credentials and secrets stored on the system. Simply uninstalling the package is insufficient to ensure system integrity, as additional malicious components may persist. No CVSS score or patch information is available, and no known exploits in the wild have been reported at this time.

Full system compromise on any computer with the 'sixseven9' package installed. All secrets and keys stored on the compromised system are at risk and should be considered exposed. The system may be under external control, posing a severe security risk.

Remove the 'sixseven9' package immediately from affected systems. Rotate all secrets and keys from a separate, uncompromised computer to prevent unauthorized access. Because the system may remain compromised even after removal, consider rebuilding or thoroughly cleaning the affected systems to ensure complete eradication of malicious components.