The rollup-plugin-polyfill-connect npm package is identified as containing malicious code that can fully compromise a host system. According to the source details, any computer with this package installed should be considered fully compromised, necessitating immediate rotation of all secrets and keys from a separate, secure machine. The package's presence indicates a severe security risk, with potential for persistent unauthorized access beyond simple removal of the package.

Full system compromise on any computer with the package installed or running. All secrets and keys stored on the affected system are at risk and must be rotated. The attacker may maintain persistent control even after package removal, posing ongoing security risks.

Remove the rollup-plugin-polyfill-connect package immediately. Rotate all secrets and keys from a different, uncompromised computer. Because full control of the system may have been given to an attacker, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious components. No official patch or fix is available; mitigation relies on removal and secret rotation.