The 'typescript-util-core' package in the npm ecosystem has been identified as containing malicious code. Installation or execution of this package results in a full compromise of the host computer, potentially allowing attackers to access all stored secrets and keys. Due to the extent of the compromise, simple removal of the package is insufficient to restore system integrity. Immediate secret/key rotation from a separate secure environment is required to mitigate potential damage.

Full system compromise on any computer with the package installed or running. All stored secrets and keys on the compromised system are at risk and must be considered exposed. The attacker may have persistent access beyond the presence of the malicious package itself.

Remove the 'typescript-util-core' package immediately from all affected systems. Rotate all secrets and keys stored on the compromised machines from a separate, secure computer. Because the attacker may have established persistent control, consider full system reimaging or restoration from a known good backup to ensure complete remediation.