The 'api-node-utils' npm package is identified as containing malicious code that fully compromises any computer where it is installed or executed. This compromise includes potential unauthorized access and control over the system. Due to the severity of the compromise, simply uninstalling the package may not remove all malicious artifacts or backdoors. The advisory recommends immediate key and secret rotation from a different, secure device to mitigate ongoing risk.

Any system with the 'api-node-utils' package installed or running should be considered fully compromised. Attackers may have gained full control over the system, risking exposure and theft of all stored secrets and keys. The presence of this package undermines system integrity and confidentiality, with no guarantee that removal of the package alone will restore security.

Remove the 'api-node-utils' package immediately from all affected systems. Rotate all secrets and keys stored on the compromised machines using a separate, secure computer. Because full system compromise is possible, consider conducting a thorough forensic analysis and system rebuild to ensure all malicious components are eradicated. No official patch or fix is available; remediation relies on removal and secret rotation.