The @aspect-security/argon2 npm package was identified as containing malicious code that executes arbitrary commands during its preinstall phase and exfiltrates data. This behavior effectively compromises any system where the package is installed or executed. Due to the nature of the compromise, attackers may gain persistent control beyond the presence of the package itself, necessitating comprehensive incident response including secret rotation and system remediation.

Systems with this package installed or running are considered fully compromised. Attackers may have executed arbitrary commands and exfiltrated sensitive data. Secrets and keys stored on the compromised system are at risk and must be rotated. Removing the package alone does not ensure removal of all malicious components or backdoors introduced by the attacker.

Remove the @aspect-security/argon2 package immediately. Rotate all secrets and keys from a separate, trusted system. Conduct a thorough investigation and remediation of the affected system to identify and remove any additional malicious software or backdoors. There is no official patch or fix for this malicious package; remediation relies on removal and incident response.