The brock-loader package in the npm ecosystem is identified as malicious software. According to the source details, any system with this package installed should be considered fully compromised. The attacker may have gained full control over the system, potentially accessing sensitive information such as secrets and keys. Due to the possibility of persistent backdoors or additional malware, simply uninstalling the package may not fully remediate the compromise.

Full system compromise on any computer with the brock-loader package installed or running. Potential exposure and theft of all secrets and keys stored on the affected system. Persistent attacker control may remain even after package removal.

Immediately remove the brock-loader package from all affected systems. Rotate all secrets and keys that were stored on compromised machines, performing this rotation from a separate, trusted system. Because full system compromise is possible, consider rebuilding or thoroughly cleaning affected systems to ensure removal of all malicious components.