The 'authmatrix' package in the npm ecosystem has been identified as containing malicious code. According to the source advisory, any system with this package installed should be considered fully compromised. The malicious code may grant attackers full control over the affected system, potentially exposing all stored secrets and keys. Due to the severity of the compromise, simply uninstalling the package does not guarantee removal of all malicious artifacts or backdoors.

Full system compromise on any computer with the 'authmatrix' package installed or running. All secrets and keys stored on the system are at risk and should be considered exposed. The attacker may maintain persistent access beyond the presence of the package itself.

Immediately remove the 'authmatrix' package from all affected systems. Rotate all secrets and keys from a separate, trusted system to prevent further unauthorized access. Consider the affected systems fully compromised and perform a thorough incident response and forensic analysis to identify and remove any persistent malicious components.