The @sentryx-libraries/auth-interceptor npm package has been identified as containing malicious code that compromises the host system completely. According to the source advisory, any computer with this package installed should be considered fully compromised, with potential exposure of all stored secrets and keys. The advisory warns that removing the package may not fully remove all malicious components, indicating persistent or additional malware may have been installed. There is no CVSS score available for this threat. No patch or remediation beyond removal and secret rotation is indicated. No known exploits in the wild have been reported.

Full system compromise on any machine with the package installed. All secrets and keys stored on the compromised system are at risk and should be considered exposed. The malicious code may have installed additional persistent malware beyond the package itself.

Remove the @sentryx-libraries/auth-interceptor package immediately. Rotate all secrets and keys from a separate, uncompromised system to prevent unauthorized access. Because removal of the package may not eliminate all malicious software, consider a full system forensic analysis and remediation. No official patch or fix is available; mitigation relies on removal and secret rotation.