The 'pretty-pino-loggers' npm package version 1.0.1 is identified as containing malicious code that compromises the host system completely. Installation or execution of this package can lead to full system compromise, including unauthorized access to secrets and keys. The advisory warns that removing the package alone may not eliminate all malicious software introduced. There is no CVSS score or detailed technical exploit information available. No known exploits in the wild have been reported. The package is not a cloud service, so remediation depends on user action.

Any system with 'pretty-pino-loggers' version 1.0.1 installed or running should be considered fully compromised. Attackers may have gained full control over the system, potentially accessing or exfiltrating sensitive data such as secrets and keys. The presence of this malicious package poses a critical security risk, as it undermines the integrity and confidentiality of the affected system.

Remove the 'pretty-pino-loggers' package version 1.0.1 immediately from all affected systems. Rotate all secrets and keys that were stored or used on the compromised systems, performing this rotation from a secure, unaffected computer. Due to the possibility of persistent malicious software beyond the package itself, consider performing a full system investigation and remediation, including reimaging if necessary. Patch status is not applicable as this is a malicious package rather than a vulnerability with an official fix.