The @bscom/styling npm package is identified as containing malicious code that fully compromises affected systems. Installation or execution of this package may grant attackers full control over the host computer. Due to the severity of the compromise, all stored secrets and keys on the machine should be rotated immediately from a separate, uncompromised device. Simply uninstalling the package is insufficient to ensure system integrity, as persistent malicious software may remain.

Any system with the @bscom/styling package installed or running is considered fully compromised. Attackers may have gained full control over the system, risking exposure and theft of sensitive data including secrets and keys. The presence of this package undermines system trust and security, requiring immediate incident response and credential rotation.

Remove the @bscom/styling package immediately. Rotate all secrets and keys stored on the compromised system from a different, clean computer. Conduct a thorough investigation and remediation of the affected system, as removing the package alone does not guarantee removal of all malicious components. Follow organizational incident response procedures for full recovery.