The chai-guard npm package versions =1.0.0 and =1.2.3 are identified as containing malicious code that fully compromises affected systems. Installation or execution of these versions grants attackers potential full control over the host computer. Due to the severity of the compromise, all stored secrets and keys must be rotated immediately from a different, uncompromised system. Removal of the package alone is insufficient to ensure system integrity, as additional malicious software may persist.

Any system with chai-guard versions 1.0.0 or 1.2.3 installed or running should be considered fully compromised. Attackers may have gained full control, putting all stored secrets, keys, and data at risk. This level of compromise requires urgent and comprehensive incident response, including secret rotation and system remediation.

Remove the malicious chai-guard package immediately. Rotate all secrets and keys from a separate, trusted computer to prevent further unauthorized access. Because full system compromise is likely, consider rebuilding the affected system from a known good state. No official patch or fix is available; remediation relies on removal and incident response.