The 'ts-linting-builder' npm package is identified as containing malicious code that fully compromises any host system where it is installed or executed. The compromise includes potential unauthorized access and control, risking exposure of sensitive information such as secrets and keys. Due to the nature of the compromise, remediation requires rotating all credentials from a separate secure environment and removing the package, although removal alone may not eliminate all malicious artifacts.

Any system with the 'ts-linting-builder' package installed or running should be considered fully compromised. This includes potential unauthorized access to all stored secrets and keys, which must be rotated immediately. The attacker may have persistent control beyond the presence of the package itself, posing a high risk of data breach and system integrity loss.

Remove the 'ts-linting-builder' package immediately. Rotate all secrets and keys from a different, uncompromised computer. Because the attacker may have established persistent control, consider a full system rebuild or forensic analysis to ensure complete removal of malicious components. No official patch or fix is available; remediation relies on removal and credential rotation.