The 'zaldy-baileys' package in the npm ecosystem is identified as malicious. Installation or execution of this package results in a full compromise of the host system, potentially allowing an attacker complete control. Due to the severity of the compromise, all stored secrets and keys on the affected system must be rotated immediately from a different, uncompromised device. Simply uninstalling the package is insufficient to ensure removal of all malicious artifacts or backdoors that may have been deployed.

Any system with the 'zaldy-baileys' package installed or running should be considered fully compromised. Attackers may have gained complete control over the system, risking exposure and theft of all stored secrets and keys. The compromise may persist even after package removal, as additional malicious software could have been installed.

Remove the 'zaldy-baileys' package immediately. Rotate all secrets, keys, and credentials stored on the compromised system from a separate, secure computer. Conduct a thorough investigation and remediation of the affected system, as removal of the package alone does not guarantee elimination of all malicious components. Follow organizational incident response procedures for full recovery.