The @bodata/angular-client npm package is identified as containing malicious code. According to the source details, any system with this package installed should be considered fully compromised. The malicious code potentially grants an attacker full control over the affected computer, risking exposure of stored secrets and keys. The advisory recommends immediate rotation of all secrets and keys from a different, uncompromised machine. There is no information on specific exploitation techniques or vulnerabilities within the package, only that it is malicious. No patch or remediation is provided beyond removal and secret rotation.

Systems with the @bodata/angular-client package installed are at risk of full compromise. Attackers may gain unauthorized access to sensitive information such as secrets and keys. The presence of this package indicates a severe security breach, potentially allowing persistent malicious control over the system.

Remove the @bodata/angular-client package immediately from all affected systems. Rotate all secrets and keys stored on compromised machines using a separate, secure computer. Because full control may have been granted to attackers, consider the affected systems untrusted until thoroughly cleaned or rebuilt. No official patch or fix is available; remediation relies on removal and secret rotation.