The 'whatsadmaidk' package in the npm ecosystem is identified as malicious. According to the source details, any system with this package installed should be considered fully compromised. Attackers may have gained full control, and secrets or keys stored on the system are at risk. The package removal does not guarantee eradication of all malicious components, indicating potential persistence mechanisms. No CVSS score or detailed technical exploit information is provided. There is no indication of known exploits in the wild or patch availability.

Full system compromise on any computer with the package installed. Potential exposure and theft of secrets and keys stored on the system. Persistent malicious presence may remain even after package removal, leading to ongoing security risks.

Immediately remove the 'whatsadmaidk' package from affected systems. Rotate all secrets and keys stored on the compromised computer from a separate, secure machine. Consider the affected system fully compromised and perform a thorough security assessment and remediation, including potential reimaging or rebuilding of the system to ensure complete removal of malicious software. No official patch or fix is available; remediation relies on removal and recovery procedures.