The 'webpack-session-cache' npm package version 0.1.4 has been identified as containing malicious code or depending on a malicious package. Systems with this package installed or running are considered fully compromised, with attackers potentially having full control. The malicious code presence implies that sensitive information such as secrets and keys may be exposed. Due to the severity of the compromise, simple removal of the package does not guarantee complete remediation.

Full system compromise is indicated for any computer with the affected package installed or running. This includes potential unauthorized access to all stored secrets and keys, requiring immediate rotation of credentials from a secure environment. The attacker may maintain persistent control beyond the presence of the malicious package itself.

Remove the 'webpack-session-cache' package version 0.1.4 immediately. Rotate all secrets and keys stored on the compromised system from a separate, trusted computer. Because full control of the system may have been given to an attacker, consider rebuilding or thoroughly cleaning the affected system to ensure complete eradication of malicious components. No official patch or fix is available; remediation relies on removal and credential rotation.