The 'custom-log-viewer' npm package version 1.0.0 is identified as containing malicious code that grants full control of the affected computer to an attacker. This level of compromise implies that the attacker can access all secrets and keys stored on the system. Due to the nature of the compromise, removal of the package alone is insufficient to ensure system integrity, as additional malicious software may persist. There is no CVSS score available for this threat, and no known exploits in the wild have been reported. No patch or remediation is documented, indicating that the package should be removed and affected systems treated as fully compromised.

Full system compromise on any computer with the package installed or running. All stored secrets and keys on the affected system are at risk and must be rotated. The attacker may maintain persistent access beyond the presence of the package itself.

Remove the 'custom-log-viewer' package version 1.0.0 immediately. Rotate all secrets and keys stored on the affected computer from a separate, trusted machine. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected system to ensure removal of all malicious software. No official patch or fix is available.