The rs-biginteger package on npm has been identified as containing malicious code that results in a full system compromise. According to the source advisory, any system with this package installed or running should be considered fully compromised. This implies that attackers may have gained complete control over the affected system. The advisory strongly recommends rotating all secrets and keys from a separate, uncompromised device. Due to the depth of compromise, simply uninstalling the package may not remove all malicious components or backdoors introduced by the attacker.

Full system compromise on any computer with the rs-biginteger package installed or running. Potential exposure and theft of all stored secrets and keys. Persistent malicious presence may remain even after package removal.

Immediately remove the rs-biginteger package from all affected systems. Rotate all secrets, keys, and credentials from a separate, trusted computer. Conduct a thorough investigation and remediation of the affected systems, as removal of the package alone does not guarantee elimination of all malicious software. Follow organizational incident response procedures for full system compromise.