The @rmlibrary/formatting package on npm has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host system, potentially allowing an attacker complete control. Due to the severity of the compromise, all sensitive credentials on the affected system must be considered exposed and rotated from a separate trusted environment. Removal of the package alone is insufficient to ensure system integrity, as additional malicious artifacts may persist.

Full system compromise on any computer with the package installed or running. Exposure of all stored secrets and keys on the affected machine. Potential persistent malicious presence beyond the package itself.

Remove the @rmlibrary/formatting package immediately. Rotate all secrets and keys stored on the affected computer from a different, secure machine. Conduct a thorough investigation and remediation of the affected system, as removal of the package alone does not guarantee elimination of all malicious software.