The 'older_morgan' npm package versions 1.0.1 and 1.0.2 are identified as malicious. Installation or execution of these versions results in full compromise of the host system, potentially allowing an attacker to gain complete control. Due to the nature of the compromise, simply uninstalling the package may not remove all malicious artifacts or backdoors. Immediate secret and key rotation from a different, uncompromised system is necessary to mitigate ongoing risk.

Full system compromise on any computer with the affected package installed or running. All stored secrets and keys on the compromised system are at risk and must be considered exposed. The attacker may maintain persistent access beyond the presence of the package itself.

Remove the 'older_morgan' package versions 1.0.1 and 1.0.2 from affected systems. Immediately rotate all secrets and keys from a separate, secure computer to prevent further unauthorized access. Because the system may remain compromised even after removal, consider a full system rebuild or forensic analysis to ensure all malicious components are eradicated.