The 'agent-starter-pack' npm package is identified as malicious software that, once installed or executed, results in a full compromise of the host system. This includes potential exposure and theft of sensitive credentials and keys. Due to the extent of the compromise, simply uninstalling the package may not remove all malicious components or backdoors introduced by the attacker. Immediate secret and key rotation from a secure, unaffected system is strongly advised.

Full system compromise on any computer with the package installed or running. All stored secrets and keys on the affected system are considered exposed and must be rotated. The attacker may maintain persistent access beyond removal of the package.

Remove the 'agent-starter-pack' package immediately. Rotate all secrets and keys stored on the compromised system from a different, secure computer. Because full control may have been given to an attacker, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious software.