The 'ltididp1' package in the npm ecosystem is identified as containing malicious code that fully compromises affected computers. Installation or execution of this package grants an attacker potential full control over the system, risking exposure of all stored secrets and keys. Due to the nature of the compromise, removal of the package does not guarantee eradication of all malicious components, indicating possible persistence mechanisms. No CVSS score or detailed technical exploit information is provided. No patch or remediation is indicated, and the threat is not a cloud service. The advisory strongly recommends secret/key rotation from a separate, secure environment.

Full compromise of any computer with the 'ltididp1' package installed or running. All secrets and keys stored on the system are at risk and should be considered compromised. The attacker may maintain persistent access beyond the presence of the package itself.

Remove the 'ltididp1' package immediately. Rotate all secrets and keys stored on the affected system from a different, uncompromised computer. Because the attacker may have persistent control, consider rebuilding or thoroughly cleaning the affected system to ensure complete eradication of malicious software.