The 'authsessionbridge' package distributed via npm has been identified as malicious. Installation or execution of this package results in a full compromise of the host system, potentially allowing an attacker to control the machine and access sensitive information such as secrets and keys. Due to the severity of the compromise, simply uninstalling the package may not remove all malicious components introduced by the attacker.

Full system compromise on any computer with the 'authsessionbridge' package installed or running. All stored secrets and keys on the compromised system are at risk and should be considered exposed. The attacker may maintain persistent access beyond the presence of the package itself.

Remove the 'authsessionbridge' package immediately from all affected systems. Rotate all secrets and keys stored on the compromised machines from a separate, secure computer. Because the attacker may have established persistent control, consider rebuilding affected systems from known good backups or reinstalling the operating system to ensure complete remediation.