The @flipbit2-bb/scope-test package in the npm ecosystem is identified as containing malicious code. Installation or execution of this package results in a full system compromise, allowing an attacker potentially complete control over the affected computer. Due to the nature of the compromise, removal of the package alone is insufficient to restore system integrity, and secret credentials stored on the system are considered exposed and must be rotated from a secure environment.

Any system with this package installed or running is considered fully compromised. Attackers may have gained full control, potentially accessing or exfiltrating sensitive data, credentials, and secrets. The integrity and confidentiality of the affected system are severely impacted. Removal of the package does not guarantee elimination of all malicious artifacts or backdoors.

Remove the @flipbit2-bb/scope-test package immediately from all affected systems. Rotate all secrets, keys, and credentials stored on the compromised systems from a separate, secure computer. Due to the high risk of persistent compromise, consider rebuilding affected systems to ensure complete eradication of malicious code and backdoors.