The @deel-core/client-payroll-onboarding-types npm package is identified as malicious. Installation or execution of this package results in full compromise of the affected system, potentially allowing an attacker complete control. Due to the severity of the compromise, all credentials and secrets stored on the system must be rotated from a different, secure machine. The package removal does not ensure complete remediation because the attacker may have installed additional persistent malicious components.

Full system compromise on any computer with the package installed or running. All secrets and keys stored on the compromised system are at risk and should be considered exposed. The attacker may have persistent access beyond the presence of the package itself.

Immediately remove the @deel-core/client-payroll-onboarding-types package from affected systems. Rotate all secrets, keys, and credentials from a separate, uncompromised device. Conduct a thorough investigation and remediation of the affected system as removal of the package alone does not guarantee elimination of all malicious artifacts.