The 'web-api-node' package distributed via npm has been identified as containing malicious code. Installation or execution of this package results in a full system compromise, allowing an attacker to gain control over the affected computer. Due to the severity of the compromise, all credentials and secrets stored on the system must be considered exposed and rotated from a different, secure environment. Removal of the package does not ensure complete remediation, as the attacker may have installed additional persistent malicious components.

Full compromise of the affected computer, including potential unauthorized access to all stored secrets and keys. The attacker may maintain persistence beyond removal of the malicious package, leading to ongoing risk.

Immediately remove the 'web-api-node' package from affected systems. Rotate all secrets and keys stored on the compromised computer using a separate, secure device. Conduct a thorough investigation and remediation of the affected system, as removal of the package alone may not eliminate all malicious components.