The 'alder_morrgan' package in the npm ecosystem is identified as malicious. Installation or execution of this package results in a full compromise of the host system, potentially allowing an attacker complete control. Due to the severity of the compromise, simply uninstalling the package does not guarantee removal of all malicious artifacts. Immediate secret and key rotation from a secure environment is advised to mitigate ongoing risks.

Full system compromise on any computer with the package installed or running. Potential exposure and theft of all stored secrets and keys. Persistent malicious presence may remain even after package removal.

Remove the 'alder_morrgan' package immediately. Rotate all secrets and keys stored on the affected system from a different, secure computer. Because the system may be fully compromised, consider rebuilding the affected environment to ensure complete remediation. No official patch or fix is available as this is a malicious package rather than a vulnerability in legitimate software.