The 'react-icon-svgs' npm package has been identified as containing malicious code that fully compromises the host system. According to the source advisory, installation or execution of this package results in a complete compromise, potentially allowing an attacker full control. The advisory strongly recommends immediate rotation of all secrets and keys from a separate, uncompromised system. There is no known patch or fix available, and removal of the package may not eliminate all malicious artifacts.

Any system with the 'react-icon-svgs' package installed or running should be considered fully compromised. This includes potential unauthorized access, control over the system, and exposure of all stored secrets and keys. The compromise is severe and persistent beyond simple package removal.

Remove the 'react-icon-svgs' package immediately. Rotate all secrets and keys stored on the compromised system from a different, trusted computer. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected system to ensure all malicious components are removed. No official fix or patch is available; remediation relies on removal and secret rotation.