The 'pino-zod' package on npm has been identified as containing malicious code that results in a full system compromise. Installation or execution of this package grants an attacker complete control over the affected computer. Due to the depth of compromise, simply uninstalling the package is insufficient to ensure system integrity. Immediate secret and key rotation from a secure environment is required to mitigate potential damage.

Any system with the 'pino-zod' package installed or running is considered fully compromised. Attackers may have gained full control, potentially exposing all stored secrets and keys. This level of compromise poses a critical risk to confidentiality, integrity, and availability of the affected system and its data.

Remove the 'pino-zod' package immediately. Rotate all secrets and keys stored on the compromised system from a separate, secure computer. Because the system is fully compromised, consider rebuilding or thoroughly cleaning the affected machine to ensure removal of all malicious components. No official patch or fix is available; mitigation relies on removal and secret rotation.