The 'debug-glitzs' npm package versions 1.0.0 to 1.0.4 include malicious code that compromises the host system. Installation or execution of this package potentially grants full control to an attacker. Due to the nature of the compromise, simply uninstalling the package may not remove all malicious artifacts. The advisory recommends treating affected systems as fully compromised and rotating all credentials from a separate, secure environment.

Systems with the affected versions of 'debug-glitzs' installed or running are considered fully compromised, risking exposure of all stored secrets and keys. The malicious code may allow attackers to gain complete control over the system, leading to potential data theft, unauthorized access, and persistence of malicious software beyond package removal.

Remove the 'debug-glitzs' package immediately from all affected systems. Rotate all secrets, keys, and credentials that were stored or used on the compromised systems, performing this rotation from a separate, secure environment. Due to the full compromise risk, consider rebuilding or thoroughly cleaning affected systems to ensure removal of all malicious components. No official patch or fix is available; remediation relies on removal and credential rotation.