The 'safe-validate' npm package versions 1.0.1, 1.0.2, 1.0.3, and 1.0.4 have been identified as containing malicious code. Installation or execution of these versions can lead to a full compromise of the affected computer, potentially allowing an attacker to gain complete control. Due to the nature of the compromise, simply uninstalling the package does not guarantee removal of all malicious artifacts.

Systems with any of the affected 'safe-validate' package versions installed or running are fully compromised. Attackers may have gained complete control over the system, risking exposure and theft of all stored secrets and keys. This necessitates immediate secret/key rotation from a secure environment. The compromise may persist even after package removal.

Remove the 'safe-validate' package immediately from all affected systems. Rotate all secrets and keys stored on compromised systems using a separate, trusted computer. Because the system may be fully compromised, consider rebuilding or thoroughly cleaning the affected machines to ensure removal of all malicious software. No official patch or fix is available; the package should be avoided entirely.