The saurus-assets npm package is identified as malicious software that, when installed or executed, results in a full compromise of the host computer. This includes potential unauthorized access and control by an outside entity. Due to the extent of the compromise, secrets and keys stored on the affected system are considered exposed and must be rotated from a secure environment. The package removal is necessary but insufficient to fully remediate the infection, as additional malicious artifacts may persist.

Full system compromise on any computer with the saurus-assets package installed or running. Exposure of all stored secrets and keys on the affected system. Potential persistent malicious presence beyond the package itself.

Immediately remove the saurus-assets package from all affected systems. Rotate all secrets and keys stored on the compromised computers from a separate, secure machine. Because removal of the package may not eliminate all malicious software, consider a full system reinstallation or forensic analysis to ensure complete remediation. No official patch or fix is available; mitigation relies on removal and secret rotation.