The ts-node-utils npm package has been identified as containing malicious code that fully compromises any system where it is installed or executed. This malicious package can lead to complete system compromise, including potential unauthorized access to stored secrets and keys. Due to the severity of the compromise, removal of the package alone is insufficient to ensure system integrity, as attackers may have established persistent control or installed additional malware.

Systems with the ts-node-utils package installed or running are considered fully compromised. All sensitive information such as secrets and keys stored on the system may have been exposed to attackers. The attacker may have gained persistent control, making remediation difficult without full system recovery. This represents a critical security risk to affected environments.

Immediate removal of the ts-node-utils package is required. All secrets and keys stored on the compromised system must be rotated immediately from a different, secure computer. Because the system may be fully compromised, consider performing a full system rebuild or forensic analysis to ensure all malicious components are eradicated. No official patch or fix is available; remediation relies on removal and secret rotation.