The @contenteditor-shared/content-editor-common npm package is identified as containing malicious code. Installation or execution of this package results in a complete compromise of the affected system, potentially granting an attacker full control. Due to the severity of the compromise, all credentials and secrets stored on the system must be rotated immediately from a different, secure machine. Removal of the package does not guarantee the removal of all malicious artifacts or backdoors introduced by the package.

Any system with this package installed or running should be considered fully compromised. Attackers may have gained full control over the system, risking exposure or theft of all stored secrets and keys. The compromise may persist even after removal of the package, as additional malicious software could have been installed.

Remove the @contenteditor-shared/content-editor-common package immediately. Rotate all secrets, keys, and credentials from a separate, uncompromised device. Conduct a thorough investigation and remediation of the affected system, as removal of the package alone may not eliminate all malicious components. Consider rebuilding the system from a known good backup or reinstalling the operating system to ensure full eradication of the compromise.