The chalk-logger-prettier npm package in specified versions contains embedded malicious code that compromises the host system upon installation or execution. This compromise potentially grants full control to an attacker, risking exposure of all stored secrets and keys. The malicious nature of the package means that affected systems cannot be trusted even after removal of the package, as additional malware may have been installed.

Systems with the affected versions of chalk-logger-prettier installed are fully compromised. Attackers may have gained complete control over the system, leading to potential theft or misuse of sensitive information such as secrets and keys. The compromise extends beyond the package itself, as removing it does not guarantee removal of all malicious artifacts.

Remove the affected chalk-logger-prettier package versions immediately. Rotate all secrets and keys stored on the compromised system from a different, secure computer. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious software. No official patch or fix is available; mitigation relies on removal and secret rotation.