The 'env-axios' npm package version 1.3.6 is identified as containing malicious code that fully compromises affected systems. Installation or execution of this package can lead to complete control of the computer by an attacker. Due to the severity of the compromise, all secrets and keys stored on the system should be rotated immediately from a different, secure machine. Simply removing the package is insufficient to ensure system integrity, as additional malicious software may remain.

Systems with 'env-axios' version 1.3.6 installed or running are considered fully compromised. Attackers may have gained complete control over the system, risking exposure of all stored secrets and keys. The compromise may persist beyond removal of the package, indicating potential presence of additional malware.

Remove the 'env-axios' package version 1.3.6 immediately. Rotate all secrets and keys stored on the compromised system from a separate, secure computer. Conduct a thorough investigation and remediation of the affected system, as removal of the package alone does not guarantee elimination of all malicious components. No official patch or fix is available; the package should be considered untrusted and avoided.