The @sixt-payment/form-react npm package has been identified as containing malicious code that can fully compromise a computer where it is installed. According to the source details, any system running this package should be considered fully compromised, with potential unauthorized access to all stored secrets and keys. The package's presence indicates a severe security risk, and removal alone may not eradicate all malicious components introduced by it.

Full compromise of the affected computer, including potential unauthorized access to all stored secrets and keys. The malicious package may allow an attacker to maintain persistent control over the system, making it unsafe to trust any data or credentials stored on the machine without thorough remediation.

Remove the @sixt-payment/form-react package immediately from all affected systems. Rotate all secrets and keys stored on compromised computers from a different, secure machine. Because the system may be fully compromised, consider rebuilding the affected systems to ensure complete removal of malicious software.