The @e50/utils npm package has been identified as containing malicious code that results in a full system compromise. According to the source advisory, any system with this package installed should be considered fully compromised, implying that attackers may have gained complete control. The advisory recommends immediate rotation of all secrets and keys from a separate, uncompromised system. Due to the nature of the compromise, simply uninstalling the package may not remove all malicious artifacts or backdoors introduced by the attacker.

Systems with the @e50/utils package installed are considered fully compromised, potentially allowing attackers complete control over the affected computer. This includes the risk of exposure or theft of all stored secrets and keys. The compromise is severe and persistent, as removal of the package does not guarantee eradication of all malicious software installed as a result.

Remove the @e50/utils package immediately from affected systems. Rotate all secrets and keys stored on the compromised computer using a different, trusted machine. Due to the full compromise, consider rebuilding or thoroughly cleaning the affected systems to ensure removal of all malicious software. No official patch or fix is available; remediation relies on removal and secret rotation.