The '@content-editor/common' npm package is identified as malicious software that, when installed or executed, fully compromises the host computer. This compromise includes potential unauthorized access to all stored secrets and keys. Due to the severity of the infection, simply uninstalling the package may not remove all malicious components. The advisory recommends treating any system with this package as fully compromised and taking immediate remediation steps to secure credentials from a separate, trusted environment.

Any system with the '@content-editor/common' package installed or running should be considered fully compromised, with attackers potentially having access to all stored secrets and keys. This represents a complete breach of system integrity and confidentiality. The malicious code may persist beyond removal of the package, increasing the risk of ongoing unauthorized access.

Remove the '@content-editor/common' package immediately. Rotate all secrets and keys stored on the compromised system from a separate, uncompromised computer. Because full system compromise is likely, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious software. No official patch or fix is available; remediation relies on removal and credential rotation.