The @druidsoft/botframework-directlinejs npm package is identified as malicious software. Installation or execution of this package results in a full compromise of the host system, potentially allowing attackers to gain complete control. Due to the severity of the compromise, all credentials stored on the affected system should be considered exposed and must be rotated from a secure environment. Removal of the package alone is insufficient to ensure system integrity, as additional malicious artifacts may persist.

Full system compromise on any computer with the package installed or running. All secrets and keys stored on the compromised system are at risk and must be rotated. The attacker may maintain persistent access even after package removal.

Immediately remove the @druidsoft/botframework-directlinejs package from affected systems. Rotate all secrets, keys, and credentials from a separate, uncompromised machine. Conduct a thorough investigation and remediation of the affected system, as removing the package alone does not guarantee elimination of all malicious software.