The 'bootstrap-utils' npm package version 4.5.0 is identified as containing malicious code that fully compromises the host system. According to the source advisory, any system with this package installed should be considered fully compromised, with potential unauthorized control by an external entity. The advisory warns that removal of the package may not eliminate all malicious artifacts or backdoors introduced during its presence. There is no CVSS score or detailed technical vulnerability description available, but the threat is classified as a malicious package infection rather than a traditional software vulnerability.

Systems with 'bootstrap-utils' version 4.5.0 installed are considered fully compromised, potentially allowing attackers full control. All secrets, credentials, and keys stored on the system are at risk and should be rotated immediately from a different, uncompromised device. The malicious code may have installed persistent backdoors or additional malware beyond the package itself.

Remove the 'bootstrap-utils' package version 4.5.0 from all affected systems. Immediately rotate all secrets, keys, and credentials that were stored or used on the compromised systems, performing this action from a separate, secure device. Because the system may be fully compromised, consider rebuilding or restoring the system from a known clean backup to ensure complete removal of malicious components.