The npm package wac-atl-context has been identified as containing malicious code that compromises the host system completely. According to the source advisory, any system with this package installed should be considered fully compromised, requiring immediate secret and key rotation from a separate device. The package removal alone is insufficient to ensure system integrity due to potential persistent malicious components.

Full system compromise on any computer with the wac-atl-context package installed or running. All secrets and keys stored on the affected system are at risk and must be rotated immediately. The presence of this package indicates potential unauthorized control by an external entity.

Remove the wac-atl-context package immediately. Rotate all secrets and keys stored on the affected system from a separate, uncompromised device. Because removal of the package may not eliminate all malicious components, consider a full system reinstallation or forensic analysis to ensure complete remediation.