The emojiprint-logger npm package versions 5.6.2 and 1.1.0 have been identified as containing malicious code. Installation or execution of these versions can lead to a full system compromise, allowing attackers to gain control over the affected computer. The advisory warns that all secrets and keys stored on the compromised system should be rotated immediately from a different, trusted machine. Due to the nature of the compromise, simply removing the package may not fully remove all malicious artifacts or backdoors introduced.

Systems with emojiprint-logger versions 5.6.2 or 1.1.0 installed or running are considered fully compromised. Attackers may have gained complete control over the affected computer, risking exposure and theft of sensitive credentials, secrets, and keys. This level of compromise can lead to further unauthorized actions beyond the initial infection.

Immediate removal of the emojiprint-logger package versions 5.6.2 and 1.1.0 is recommended. However, because the system may be fully compromised, all secrets and keys stored on the affected computer should be rotated from a separate, trusted device. Additional forensic analysis and system restoration from clean backups should be considered to ensure complete eradication of malicious software.