The 'bundrix' npm package is identified as malicious software that, once installed, grants an attacker full control over the affected computer. This level of compromise implies that sensitive information such as secrets and keys may be exposed or stolen. Due to the potential persistence of the attacker beyond the package removal, the system should be considered fully compromised and remediated accordingly.

Full system compromise on any computer with the 'bundrix' package installed or running. Potential exposure and theft of secrets and keys stored on the system. Removal of the package does not guarantee elimination of all malicious components, indicating possible persistent backdoors or additional malware.

Immediately remove the 'bundrix' package from affected systems. Rotate all secrets and keys from a separate, secure computer. Consider the affected system fully compromised and perform a thorough incident response, including system reimaging or restoration from a known good backup. No official patch or fix is available; remediation relies on removal and recovery procedures.