The logger-beauty package on npm, specifically versions 1.0.1, 1.0.2, 1.0.3, 1.1.0, and 2.1.1, contains malicious code that compromises the security of any computer on which it is installed or executed. This malicious package can lead to full system compromise, potentially exposing all stored secrets and keys. Due to the nature of the compromise, simply uninstalling the package may not remove all malicious artifacts or backdoors introduced by the attacker.

Systems with the affected versions of logger-beauty installed are fully compromised, risking exposure of all stored secrets and keys. Attackers may have persistent control over the system beyond the presence of the package itself, making remediation challenging.

Remove the logger-beauty package immediately from affected systems. Rotate all secrets and keys stored on the compromised machines using a separate, secure computer. Because the system may remain compromised even after removal, consider rebuilding or thoroughly auditing the affected machines to ensure complete eradication of malicious code. No official patch or fix is indicated; the package itself is malicious.