The @gartnerx/gx-npm-messenger-util package is identified as containing malicious code that fully compromises the host system. Installation or execution of this package grants an attacker full control over the affected computer. Due to the severity of the compromise, secrets and keys stored on the system are considered exposed and must be rotated from a secure environment. Removal of the package does not ensure complete remediation because the attacker may have installed additional persistent malicious components.

Complete system compromise on any computer with the package installed or running. Exposure of all stored secrets and keys on the compromised machine. Potential persistence of malicious software beyond the presence of the package itself.

Immediately remove the @gartnerx/gx-npm-messenger-util package from affected systems. Rotate all secrets and keys that were stored on the compromised machine using a different, trusted computer. Conduct a thorough investigation and remediation of the affected system, as removal of the package alone may not eliminate all malicious software. No official patch or fix is available; remediation relies on removal and secret rotation.