The @fed-sofia/jetify npm package is identified as malicious software that, when installed or executed, fully compromises the host system. According to the source advisory, any computer with this package should be considered fully compromised, necessitating immediate rotation of all secrets and keys from a separate, secure machine. The package removal alone is insufficient to ensure system integrity due to potential persistent backdoors or additional malware installed by the attacker.

Full system compromise on any computer with the @fed-sofia/jetify package installed or running. This includes potential unauthorized access to all stored secrets and keys, risking data breaches and further exploitation. The attacker may maintain persistent control beyond the presence of the package itself.

Immediately remove the @fed-sofia/jetify package from all affected systems. Rotate all secrets and keys from a different, uncompromised computer. Conduct a thorough security assessment and remediation of the affected systems, as removal of the package alone does not guarantee elimination of all malicious software or attacker access.