The 'grid-settings-align' npm package versions 14.1.1 and 14.1.2 have been identified as containing malicious code. Installation or execution of these versions results in a full compromise of the host system, potentially allowing an attacker to gain complete control. Due to the nature of the compromise, secrets and keys stored on the affected system must be rotated from a separate, secure environment. The package removal does not ensure full remediation, as additional malicious artifacts may remain on the system.

Systems with 'grid-settings-align' versions 14.1.1 or 14.1.2 installed are fully compromised. Attackers may have gained complete control over the affected computer, risking exposure and theft of sensitive information including secrets and keys. The compromise may persist even after removal of the package, indicating potential persistence mechanisms or additional malware installed.

Immediate removal of the 'grid-settings-align' package versions 14.1.1 and 14.1.2 is required. All secrets and keys stored on the compromised system should be rotated immediately from a different, trusted machine. Because full control of the system may have been given to an attacker, further forensic analysis and remediation steps are recommended to ensure complete removal of malicious software. No official patch or fix is available; the vendor has not provided a remediation advisory. Users should avoid using these affected versions entirely.