The npm package gulp-jscrambler version 8.6.2 has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the affected computer, potentially allowing an attacker complete control. Due to the severity of the compromise, simply uninstalling the package may not remove all malicious artifacts. The advisory recommends immediate secret and key rotation from a separate secure environment to mitigate ongoing risk.

Full system compromise on any computer with gulp-jscrambler version 8.6.2 installed or running. All stored secrets and keys on the compromised system are at risk and should be rotated immediately. Removal of the package alone is insufficient to guarantee remediation due to potential persistence of malicious software.

Remove the malicious gulp-jscrambler package version 8.6.2 from all affected systems. Immediately rotate all secrets and keys stored on the compromised systems from a different, secure computer. Due to the possibility of persistent malicious software, consider a full system reinstallation or forensic analysis to ensure complete remediation.